Bug#411042: [Pkg-samba-maint] Bug#411042: samba -dosen't connect to OpenLDAP

[Mgr. Peter Tuharsky]

Hi

I haven't found log messages from smbd die.

It's quite difficult to do some real testing, because this is our 
production server. However I'll try it probably in Thursday.

> Are there any log messages when the smbd dies?

I haven't found any. I'll try it again.


> And all of these other clients are configured to use starttls?

AFAIK, no. I haven't found TLS startup in libnss-ldap.conf or pam_ldap.conf

> 
>>> How do you have libldap configured to verify the SSL certificates?  If you
>>> try to connect to the server with ldapsearch, do you get the same error?
>> Please, specify, what kind of info do You need here. I don't understand 
>> that.
> 
> E.g., an /etc/ldap/ldap.conf on another system I know uses starttls has this
> line:
> 
>   TLS_CACERT /etc/ldap/cacert.pem

On server, yes, there is such a line.

> 
> Do you have a similar configuration ensuring the integrity of the SSL
> connection?  (It sounds like you must, if other clients connect
> successfully, but I just want to be sure.)

How could I prove it?

> 
> And if you connect to the LDAP server using ldapsearch -ZZ -h vedko6.misbb.sk,
> does it connect successfully?

I'll try.

> 
> Cheers,