--On June 5, 2007 6:02:21 PM -0400 "West, Jon (NIH/NIMH) [C]" wjon@mail.nih.gov wrote:
ok so I've learned a little bit more about ldapsearch on the server running TLS I can use the -ZZ directive and connect then next thing I did was to try and connect from a different machine using -ZZ with this command ldapsearch -ZZ -x -h serveraddress -v -b 'uid=tester,ou=People,dc=test,dc=com' this results in the following output ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
ok fine, that is correct, it does not have the CA cert to use, I tried to copy the CAcert from the Ldap server but I still get the same error
Did you tell ldapsearch where to find the CA cert? (hint: .ldaprc or ldap.conf)
--Quanah
-- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration