[Pkg-freeradius-maintainers] Bug#1032590: Intermediate certficate support

[Sakirnth Nagarasa]

Hi Bernard

On 3/10/23 08:55, Bernhard Schmidt wrote:
> I will upload a 3.2.1-3 within the next hours to cherry-pick this, could
> you please test the resulting binary and report back? I will then apply
> for a freeze exception.

Thank you for uploading the new version. I quickly tested the new binary
in our setup, Freeradius can not bind to ldap server anymore with
version 3.2.1-3.

If you want I can further investigate on Monday. But for now the only
thing I can send to you is this output:

Sat Mar 11 14:28:38 2023 : Debug: LDAP server string:
ldaps://${LDAP_SERVER}:636
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): Using local pool section
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): No pool reference
found for config item "ldap.pool"
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): Initialising
connection pool
Sat Mar 11 14:28:38 2023 : Debug:    pool {
Sat Mar 11 14:28:38 2023 : Debug:    	start = 5
Sat Mar 11 14:28:38 2023 : Debug:    	min = 3
Sat Mar 11 14:28:38 2023 : Debug:    	max = 32
Sat Mar 11 14:28:38 2023 : Debug:    	spare = 10
Sat Mar 11 14:28:38 2023 : Debug:    	uses = 0
Sat Mar 11 14:28:38 2023 : Debug:    	lifetime = 0
Sat Mar 11 14:28:38 2023 : Debug:    	cleanup_interval = 30
Sat Mar 11 14:28:38 2023 : Debug:    	idle_timeout = 60
Sat Mar 11 14:28:38 2023 : Debug:    	retry_delay = 30
Sat Mar 11 14:28:38 2023 : Debug:    	spread = no
Sat Mar 11 14:28:38 2023 : Debug:    }
Sat Mar 11 14:28:38 2023 : Info: rlm_ldap (ldap): Opening additional
connection (0), 1 of 32 pending slots used
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): Connecting to
ldaps://${LDAP_SERVER}:636
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): New libldap handle
0x5653f2b3ba40
TLS: can't connect: (unknown error code).
Sat Mar 11 14:28:38 2023 : Error: rlm_ldap (ldap): Bind with (anonymous)
to ldaps://${LDAP_SERVER}:636 failed: Can't contact LDAP server
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap: Closing libldap handle
0x5653f2b3ba40
Sat Mar 11 14:28:38 2023 : Error: rlm_ldap (ldap): Opening connection
failed (0)
Sat Mar 11 14:28:38 2023 : Debug: rlm_ldap (ldap): Removing connection pool
Sat Mar 11 14:28:38 2023 : Error:
/etc/freeradius/3.0/mods-enabled/ldap[8]: Instantiation failed for
module "ldap"

Thank you and cheers
Sakirnth