Artikkelin Setting up OpenLDAP on Ubuntu 10.04 Alpha 2 (Lucid), part 2 kommentit

Kirjoittaja: Dan Bishop » Ubuntu 11.10 SBS (Small Business Server) Setup: Part 3 – OpenLDAP

Sat, 29 Oct 2011 10:47:00 +0000

[...] http://www.opinsys.fi/en/setting-up-openldap-on-ubuntu-10-04-lucid-part2 [...]

Kirjoittaja: Adriano

Adriano — Thu, 10 Feb 2011 16:02:30 +0000

How you solved this problem (if you managed to solve it) ?
Thanks.

Kirjoittaja: Dan Bishop » Ubuntu 10.04 SBS (Small Business Server) Setup: Part 3 – OpenLDAP

Wed, 02 Feb 2011 21:07:29 +0000

[...] http://www.opinsys.fi/en/setting-up-openldap-on-ubuntu-10-04-lucid-part2 [...]

Kirjoittaja: Jack

Jack — Wed, 20 Oct 2010 21:18:56 +0000

For me a restart of the slapd servicewas required for the ldapsearch to work. Before the restart would always get:

ldap_start_tls: Protocol error (2)
additional info: unsupported extended operation

Kirjoittaja: Veli-Matti Lintu

Veli-Matti Lintu — Wed, 08 Sep 2010 07:24:28 +0000

Yes, the text above the box is a bit confusing. One should write the script in the box with needed changes in a file and execute it. The script call ldapmodify and feeds the ldif to it.

Kirjoittaja: wildweaselmi

wildweaselmi — Tue, 07 Sep 2010 13:34:58 +0000

Thanks for the great article… Very well documented but ran into an issue with
The following ldif sets the configuration parameters in cn=config: Am I suppose to create a file, edit a file, run each command individually?

It’s pretty much straight forward for someone trying to learn (like myself) but lost with that part.

Kirjoittaja: Mogga

Mogga — Thu, 12 Aug 2010 17:23:49 +0000

you forgot to install the ca-cert on the server as well…

sudo install -D -o openldap -g openldap -m 600 slapd-server.crt \
/etc/ssl/certs/slapd-server.crt

sudo install -D -o openldap -g openldap -m 600 slapd-server.key \
/etc/ssl/certs/slapd-server.key

You actually describe it properly but the code is missing the following:

sudo install -D -o openldap -g openldap -m 644 slapd-ca-cert.pem \
/etc/ssl/certs/slapd-ca-cert.pem

Kirjoittaja: Mogga

Mogga — Thu, 12 Aug 2010 17:14:08 +0000

on the client i can’t do the verification at the end —

ldap_start_tls: Protocol error (2)
additional info: unsupported extended operation

are you missing an ldap install in this post somewhere?

Kirjoittaja: Russell Knighton

Russell Knighton — Mon, 02 Aug 2010 14:27:41 +0000

A brilliant series of documents, but I have a problem with my TLS set-up. I’ve followed your instructions, but when I run the test command above I get:

ldap_start_tls: Connect error (-11)
additional info: A TLS packet with unexpected length was received.

Without -ZZ everything works just fine. Can you offer any help?

Kirjoittaja: zeratul

zeratul — Fri, 11 Jun 2010 15:58:33 +0000

Hey, good deal at all, but i had the Problem that when i use perm 600 on slapd-server.key and slapd-server.crt the client gets: ldap_start_tls: Protocol error (2)
so i set chmod 644 also and it works fine.
My Client is on another machine with /etc/hosts
192.168.0.1 ldap.edu.example.org
set cause the cert would not work without it.

But still thx worked for me .