atom feed7 messages in com.redhat.fedora-directory-usersRE: [Fedora-directory-users] LDAP Err...
FromSent OnAttachments
steve nguyenSep 1, 2008 2:09 am 
steve nguyenSep 1, 2008 6:10 am 
Groot, Mathijs de (IDT Competence Java)Sep 2, 2008 6:06 am 
steve nguyenSep 2, 2008 6:34 am 
Rich MegginsonSep 2, 2008 8:23 am 
Rich MegginsonSep 2, 2008 8:25 am 
steve nguyenSep 8, 2008 6:23 am 
Subject:RE: [Fedora-directory-users] LDAP Error with sync agreement using ssl
From:steve nguyen (stev@hotmail.fr)
Date:Sep 8, 2008 6:23:57 am
List:com.redhat.fedora-directory-users

OK

So in the passsync log I have this error message :

Error initializing SSL: err=-8192 Ensure that your SSL is setup correctly

Failed to load entries from file Ldap bind error in Connect 49: Invalid credentials

Can not connect to ldap server in SyncPasswords Ldap bind error in Connect 81: Can't contact LDAP server

Ldap bind error in Connect 91: Can't connect to the LDAP server

In the FDS log (replication status) I've got this :

"LDAP error: Can't contact LDAP server. Error > > Code 81.

In AD, I set up SSL using IIS because I had some troubles usiing certreq I enter this url http://<servername>/certsrv in my browser and I ask for a user
certificate.

And I import it in the Trusted Root CA.

After the passync installation in Windows 2003 Server :

I enter this commands : certutil.exe -d . -N

I export my certs from FDS by doing this : pk12util -d . -o dscert.p12 -n
Server-Cert

In 2003 Server I put the FDS cert in the passync installation folder and I
export : pk12util.exe -d "C:\Program Files\Red Hat Directory Password
Synchronization" –i dscert.p12

And I give the trusted peer status : certutil.exe -d "C:\Program Files\Red Hat
Directory Password Synchronization" –M -n Server-Cert -t "P,P,P"

I also do the same for the cascert cert but I give this attributes trust
attributes "CT,CT,CT" because it was mention in the FDS wiki.

That's all I do to set up SSL

Did you see what I did wrong ?

Thanks

_________________________________________________________________ Téléphonez gratuitement à tous vos proches avec Windows Live Messenger  ! 
Téléchargez-le maintenant ! http://www.windowslive.fr/messenger/1.asp