Repeated error in syslog.log: "startTLS is disabled, ignored"

[Danny Petterson - DK]

Hi Gurus.

Repeatedly I get this error in my syslog.log on several systems:

"Jun 4 19:02:00 Hostname syslog: pid:5345 - config.c:301: (): startTLS is disabled, ignored"

I suspect it to be the ldapclient which makes it, as it is the only place Im sure where startTLS is disabled. Tried to go from DEBUG to INFO-mode in the ldapclint's configfile, but it did not do the trick.

Overall everything works fine (uses ldap against MS-AD), but this error is a nag.

Thanx in advance.

Greetings from
Danny Petterson

[Jeeshan]

it seems to related with sendmail. please see your sendmail configuration files.

[Jeeshan]

find more about this

http://www.sendmail.org/~ca/email/starttls.html

[Danny Petterson - DK]

Hi again!

Thanx for you reply.

Sorry, but Im pretty sure its not sendmail, as the error is in the syslog on systems where sendmail is not running.

The only running service I think could cause this is ldap, but again, who knows.

More info or alternatives would be appriciated.

Thanx in advance
Yours
Danny

[TTr]

> Jun 4 19:02:00 Hostname syslog: pid:5345 - config.c:301: (): startTLS is disabled, ignored"

What is pid 5345?
If it is still alive after the log posting it will tell you where the error is coming from.

[Danny Petterson - DK]

Nope - thats the sad thing - no PID with the number when I check...

[TTr]

You have to find a way to reproduce the error at will and monitor the syslog at the same time. If you think it is the ldap client, then concentarte on ldap and try to force the authentication (there may be caching involved so it may not work right away).

I know you said you see this with servers that don't run sendmail but it could still come from sendmail when sendmail is invoked as a client by a local mailer.

Try to corelate the time in the syslog error with times from the mail.log that emails were sent out.

[Danny Petterson - DK]

Hi All!

The answer - completely stop all loggin from the ldap-client.

Thanx for your time
Yours
Danny

[Danny Petterson - DK]

Ups - forgot to close the thread - please see the comment above.