[tpop3d-discuss]tpop and ldap tls problem

Daniel Tiefnig tpop3d at inode.at
Wed, 14 Dec 2005 11:25:45 +0100


Adam wrote:
> auth-ldap-url:          ldap://xxxxxxxxx/ou=People,o=company,c=pl

> And all work great. I try to change ldap to ldaps, and activate 
> "auth-ldap-use-tls:     true" option in tpop3d.conf, but I have such
> error:

> Dec 14 09:45:02 yyyyy tpop3d[20396]: auth_ldap_connect:
> ldap_start_tls_s: Can't contact LDAP server

> I don't think that is TLS problem, because on yyyyyyyyy:
> 
> openssl s_client -host xxxxxxx -port 636 -CAfile
> /etc/openssl/cacert.pem

You are using port 636 here, but auth-ldap will use port 389. You'll
have to specify port 636 in your auth-ldap-url to make that work the way
you want. If you run tpop3d with "-v" it will print the LDAP URL it is
using at DEBUG level.

lg,
daniel