<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD>
<META content="text/html; charset=us-ascii" http-equiv=Content-Type>
<META name=Generator content="Microsoft Word 11 (filtered medium)">
<STYLE>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.E-mailStijl17
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.E-mailStijl18
{mso-style-type:personal;
font-family:Arial;
color:navy;}
span.E-mailStijl19
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</STYLE>
</HEAD>
<BODY lang=NL dir=ltr vLink=blue link=blue>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 10pt; FONT-FAMILY: 'Arial'; COLOR: #000000">
<DIV>Hi Louis,</DIV>
<DIV> </DIV>
<DIV> I made lately a change in how the SSL certifcate
verification is done. Did you use the latest version from trunk ?
Also set the<FONT color=#000000> variable TLS_CACERTFILE in your startup script
(e.</FONT><FONT color=#000000>g. export TLS_CACERTFILE=/etc/mydir/cas.pem ). I
do not read any ldap.conf file for this yet.</FONT></DIV>
<DIV><FONT color=#000000></FONT> </DIV>
<DIV>Markus</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000">
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV>"L.P.H. van Belle" <belle@bazuin.nl> wrote in message
news:vmime.57beabe1.6a01.3a47ad2737b8db71@ms249-lin-003.rotterdam.bazuin.nl...</DIV></DIV></DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000">
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV class=Section1>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">Hai,
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">I’ve added the needed
upn, setup the _ldaps in the dns zones, thats ok now.
<BR><BR><o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">The last part, here i
need some help.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(942):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Setting up
connection to ldap server
samba-dc1.internal.domain.tld:636<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(786):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Set SSL
defaults<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(531):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Enable server
certificate check for ldap server.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(544):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Set certificate file
for ldap server to /etc/ssl/certs/cert.pem.(Changeable through setting
environment variable TLS_CACERTFILE)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(800):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR: Error while setting
start_tls for ldap server: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(953):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Bind to ldap server
with SASL/GSSAPI<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_sasl.cc(276):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR:
ldap_sasl_interactive_bind_s error: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(957):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR: Error while binding
to ldap server with SASL/GSSAPI: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(942):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Setting up
connection to ldap server
samba-dc2.internal.domain.tld:636<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(786):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Set SSL
defaults<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(531):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Enable server
certificate check for ldap server.<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(544):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Set certificate file
for ldap server to /etc/ssl/certs/cert.pem.(Changeable through setting
environment variable TLS_CACERTFILE)<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(800):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR: Error while setting
start_tls for ldap server: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(953):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: DEBUG: Bind to ldap server
with SASL/GSSAPI<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_sasl.cc(276):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR:
ldap_sasl_interactive_bind_s error: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">support_ldap.cc(957):
pid=26693 :2016/08/25 08:52:33| kerberos_ldap_group: ERROR: Error while binding
to ldap server with SASL/GSSAPI: Can't contact LDAP
server<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">I tried to set
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">TLS_CACERTFILE in
ldap.conf, didnt work, so dont know how to fix this or there to put these
variables. <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">I need a user to
connect to the ldap. Hi have that one in place.
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">I just can find how to
put this in this line so i can test this out, but i can only authenticate if the
TLS_CACERTFILE is set correctly. <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">Any suggestions here?
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">Greetz,
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy"><o:p></o:p></SPAN></FONT> </P>
<P class=MsoNormal><FONT color=navy size=2 face=Arial><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: arial; COLOR: navy">Louis<o:p></o:p></SPAN></FONT></P></DIV>
<P>
<HR>
_______________________________________________<BR>squid-users mailing
list<BR>squid-users@lists.squid-cache.org<BR>http://lists.squid-cache.org/listinfo/squid-users<BR></DIV></DIV></DIV></DIV></BODY></HTML>