- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: LDAP-UX Client Configuration
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2007 10:27 AM
тАО04-26-2007 10:27 AM
LDAP-UX Client Configuration
I am attempting to configure the LDAP-UX client on an 11iv1 host with LDAP-UX 4.10 and using an existing OpenLDAP 2.3.34 LDAP server. I am having trouble getting TLS/SSL working. The client works great without SSL/TLS.
Here's the low down:
* I run through the setup utility and everything goes well, I get the same results if I select TLS or SSL and the respective settings that apply -- I can watch the logs on my LDAP server and see that the appropriate HPUX profile is downloaded successfully each time.
* If I run /opt/ldapux/config/get_profile_entry -s nss, it also downloads the profile successfully using SSL/TLS.
This makes it appear as if everything is going to work...even the command line ldapsearch works great. Once I exit the setup utility, SSL/TLS connections will not work. Any attempt to login via console or ssh fails and user/group enumeration via pwget grget fails also. The logs on the LDAP server indicate a TLS Negotiation failure, but I can connect using the ldapsearch utility specifying -Z for SSL...
Any ideas why there would be this disconnect and the LDAP-UX setup utility and ldapsearch can successfully negotiate an SSL/TLS connection while user/group operations cannot?
TIA,
- Tags:
- LDAP
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2007 10:28 AM
тАО04-26-2007 10:28 AM
Re: LDAP-UX Client Configuration
Thanks!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2007 10:59 AM
тАО04-26-2007 10:59 AM
Re: LDAP-UX Client Configuration
Has a ssl certificate been generated or installed on the server side. If so, is the server configured correctly?
This may be an LDAP certificate issues.
SEP
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2007 11:13 AM
тАО04-26-2007 11:13 AM
Re: LDAP-UX Client Configuration
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-26-2007 11:28 AM
тАО04-26-2007 11:28 AM
Re: LDAP-UX Client Configuration
The LDAP server has the proper SSL certs and is serving over 100 Linux hosts via SSL so I don't think it's a server configuration issue, although I'm open to anything at this point.
I wonder if the client is too strict in checking the server cert at this point and I'm trying to verify that I have the proper names and IP mappings in DNS.
And Sameer,
I have tried using TLS with 'enable_starttls 1' in the ldapux_client.conf and that has not worked for me either.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО04-30-2007 04:46 AM
тАО04-30-2007 04:46 AM
Re: LDAP-UX Client Configuration
Sanitized working profile (currently in my production directory):
dn: cn=uxprofile,ou=Profiles,dc=example,dc=com
cn: uxprofile
objectClass: DUAConfigProfile
defaultSearchBase: dc=example,dc=com
defaultSearchScope: one
profileTTL: 3600
credentialLevel::
serviceSearchDescriptor: passwd:OU=People,DC=example,DC=com
serviceSearchDescriptor: group:OU=Group,DC=example,DC=com
authenticationMethod: tls:simple
defaultServerList: example.com:389 example.com:389