Re: Apache, LDAP and SSL

[Jan Trautmann <phoenix2@web.de>]

Grüsse aus der Operpfalz :) 

http://www.rrze.uni-erlangen.de/dienste/arbeiten-rechnen/linux/howtos/ldap/ssl.shtml 
There i found something about SSL and LDAP in german. 

I´ve had tried a few time ago something simular but after a few hours i 
decieded that it costs too much time to integrate this with M$ Active 
Directory. I must say that i only have done this for playing and testing. 
But i have often read in forums that there is a problem with M$ AD and LDAP in 
the same way. I remember a possible solution that the M$ AD must be the PDC 
an the Linux must be BPC but in this special case i can´t help much.

Maybe reply some more information like syslogs for the problem in SLES9.

Maybe you can get help in www.linuxforen.de (if you not already searched or 
asked there). In this forum i found this link 
http://www.oo-services.com/de/articles/sso.aspx .
This is a Howto for making SSL and LDAP running with Active Directory 2003.

I hope this could help you.
I think that the problem with not working LDAP in SLES9 is a configuration or 
version problem maybe an new version of LDAP/Samba could help. I realy dont 
know which version is in SLES9 but in SuSe most times there are old and crap 
versions,  this would be nothing new for me ;) 

Best regards

Jan Martin Trautmann 


Am Dienstag, 4. April 2006 09:33 schrieben Sie:
> Hi Admins,
>
> has anyone ever made a configuration like this:
> Apache 2.x.x, SSL and, most important, SSL-encrypted(!) LDAP auth against a
> Microcrap ActiveDirectory 2003?
>
> Topday, Apache 2.0.x and 2.2.0 works, LDAP-agaist-AD works, SSL works, but
> not LDAPS.
>
> I happily tried on SuSE10.0 (pre-built Apache, no LDAP SSL support built
> in, so it's crap) and SLES9 (own-built Apache, with ldap modules with
> ssl/SASL), but there are always strange errors, most sounding like a
> non-available LDAP server. But, indeed, the 3269 port is open there. Since
> I have no clue about the windows box, I can't say any more about this side.
>
> Is there any ressource in the world I can look on?
-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html