Hi Dan,

I found three libraries in mangpages of slapd-config i.e., OpenSSL, GnuTLS, or Mozilla NSS

On Tue, Jul 14, 2015 at 10:31 PM, Howard Chu <hyc@symas.com> wrote:

Dan White wrote:

On 07/14/15 03:45 +0500, Aneela Saleem wrote:

but when i run the search command: i.e.,
*ldapsearch -x -b "dc=platalytics,dc=com" -H 'ldap://localhost:389' -ZZ*

i get the following error:

ldap_start_tls: Protocol error (2)
additional info: unsupported extended operation

Which ssl library is your slapd compiled against? See the slapd-config
manpage for appropriate configuration for your ssl lib.

Following is my *cn=config.ldif* file:

This is not a valid file.

# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 0cd16f20
dn: cn=config
objectClass: olcGlobal
cn: config

*TLSCertificateFile: /etc/ldap/servercrt.pem*
*TLSCertificateKeyFile: /etc/ldap/serverkey.pem*
*TLSCACertificateFile: /etc/ldap/cacert.pem*

Assuming these are correct paths, verify permissions to these files, and
check them again.

Enable logging/debugging on the server side to trouble shoot.

olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: 59729584-bdf0-1034-90b9-fdf431101d87
creatorsName: cn=config
createTimestamp: 20150713211745Z
entryCSN: 20150713211745.443612Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20150713211745Z

--

  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/