Thank you for the reply:
Here it is:
# ldapwhoami -H ldaps://ldap.noa.gr:636 -x -d -1 ldap_url_parse_ext(ldaps://ldap.noa.gr:636) ldap_create ldap_url_parse_ext(ldaps://ldap.noa.gr:636/??base) ldap_sasl_bind ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP ldap.noa.gr:636 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying 2001:648:2011:10::234 636 ldap_pvt_connect: fd: 3 tm: -1 async: 0 attempting to connect: connect success TLS trace: SSL_connect:before/connect initialization tls_write: want=289, written=289 0000: 16 03 01 01 1c 01 00 01 18 03 03 18 6f 98 e6 4e ............o..N 0010: cb a4 18 3c d7 ea 88 43 1d 28 de ef 3c d9 a0 5a ...<...C.(..<..Z 0020: 8b a4 cb a1 eb 4b be 96 7f 5a 78 00 00 ac c0 30 .....K...Zx....0 0030: c0 2c c0 28 c0 24 c0 14 c0 0a 00 a5 00 a3 00 a1 .,.(.$.......... 0040: 00 9f 00 6b 00 6a 00 69 00 68 00 39 00 38 00 37 ...k.j.i.h.9.8.7 0050: 00 36 00 88 00 87 00 86 00 85 c0 32 c0 2e c0 2a .6.........2...* 0060: c0 26 c0 0f c0 05 00 9d 00 3d 00 35 00 84 c0 2f .&.......=.5.../ 0070: c0 2b c0 27 c0 23 c0 13 c0 09 00 a4 00 a2 00 a0 .+.'.#.......... 0080: 00 9e 00 67 00 40 00 3f 00 3e 00 33 00 32 00 31 ...g.@.?.>.3.2.1 0090: 00 30 00 9a 00 99 00 98 00 97 00 45 00 44 00 43 .0.........E.D.C 00a0: 00 42 c0 31 c0 2d c0 29 c0 25 c0 0e c0 04 00 9c .B.1.-.).%...... 00b0: 00 3c 00 2f 00 96 00 41 c0 12 c0 08 00 16 00 13 .<./...A........ 00c0: 00 10 00 0d c0 0d c0 03 00 0a 00 07 c0 11 c0 07 ................ 00d0: c0 0c c0 02 00 05 00 04 00 ff 01 00 00 43 00 0b .............C.. 00e0: 00 04 03 00 01 02 00 0a 00 0a 00 08 00 17 00 19 ................ 00f0: 00 18 00 16 00 23 00 00 00 0d 00 20 00 1e 06 01 .....#..... .... 0100: 06 02 06 03 05 01 05 02 05 03 04 01 04 02 04 03 ................ 0110: 03 01 03 02 03 03 02 01 02 02 02 03 00 0f 00 01 ................ 0120: 01 . TLS trace: SSL_connect:SSLv2/v3 write client hello A tls_read: want=7, got=7 0000: 16 03 03 00 3a 02 00 ....:.. tls_read: want=56, got=56 0000: 00 36 03 03 0b 75 dd 97 fc f5 46 4d 2c ec d5 a5 .6...u....FM,... 0010: 8b af e0 e1 df 40 58 d1 15 96 12 27 70 24 d7 24 .....@X....'p$.$ 0020: 30 5d 7d ed 00 00 9d 00 00 0e ff 01 00 01 00 00 0]}............. 0030: 23 00 00 00 0f 00 01 01 #....... TLS trace: SSL_connect:SSLv3 read server hello A tls_read: want=5, got=5 0000: 16 03 03 08 8c ..... tls_read: want=2188, got=2188 0000: 0b 00 08 88 00 08 85 00 08 82 30 82 08 7e 30 82 ..........0..~0. 0010: 06 66 a0 03 02 01 02 02 11 00 93 7d a9 90 df b3 .f.........}.... 0020: 39 42 b7 c4 88 39 d4 c6 c7 10 30 0d 06 09 2a 86 9B...9....0...*. 0030: 48 86 f7 0d 01 01 0c 05 00 30 44 31 0b 30 09 06 H........0D1.0.. 0040: 03 55 04 06 13 02 4e 4c 31 19 30 17 06 03 55 04 .U....NL1.0...U. 0050: 0a 13 10 47 45 41 4e 54 20 56 65 72 65 6e 69 67 ...GEANT Verenig 0060: 69 6e 67 31 1a 30 18 06 03 55 04 03 13 11 47 45 ing1.0...U....GE 0070: 41 4e 54 20 4f 56 20 52 53 41 20 43 41 20 34 30 ANT OV RSA CA 40 0080: 1e 17 0d 32 31 30 38 32 30 30 30 30 30 30 30 5a ...210820000000Z 0090: 17 0d 32 32 30 38 32 30 32 33 35 39 35 39 5a 30 ..220820235959Z0 00a0: 70 31 0b 30 09 06 03 55 04 06 13 02 47 52 31 10 p1.0...U....GR1. 00b0: 30 0e 06 03 55 04 08 0c 07 41 74 74 69 6b c3 ad 0...U....Attik.. 00c0: 31 0f 30 0d 06 03 55 04 07 13 06 41 74 68 65 6e 1.0...U....Athen 00d0: 73 31 27 30 25 06 03 55 04 0a 13 1e 4e 61 74 69 s1'0%..U....Nati 00e0: 6f 6e 61 6c 20 4f 62 73 65 72 76 61 74 6f 72 79 onal Observatory 00f0: 20 6f 66 20 41 74 68 65 6e 73 31 15 30 13 06 03 of Athens1.0... 0100: 55 04 03 13 0c 6c 64 61 70 31 2e 6e 6f 61 2e 67 U....ldap1.noa.g 0110: 72 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 r0.."0...*.H.... 0120: 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 .........0...... 0130: 01 00 ae 7f b9 26 59 5c 79 c8 c5 cb a2 dd fa 81 .....&Y\y....... 0140: d9 04 5a 86 07 e9 64 bd 2e 8a 72 ab d8 27 43 a8 ..Z...d...r..'C. 0150: 6c 90 4f 18 88 ab 1b 9f 47 84 1f 23 28 85 ba 0c l.O.....G..#(... 0160: a4 18 3a 0c 81 dc 51 78 2a 66 22 fb 96 e8 81 eb ..:...Qx*f"..... 0170: 57 1a 98 dc 44 f2 96 9b 36 b6 ab 35 d1 ae af de W...D...6..5.... 0180: 84 84 47 b4 93 82 17 44 b4 83 d3 9c 16 0a 05 37 ..G....D.......7 0190: a6 50 3a f2 5e 72 d7 34 63 28 db 1d 4e 60 d8 db .P:.^r.4c(..N`.. 01a0: 21 1b 91 74 b5 16 6b d2 fe 2a 00 74 a8 1e b9 6b !..t..k..*.t...k 01b0: 1c 0e 5d 7e 14 1b aa 2e 50 9d fa c4 45 3f d1 97 ..]~....P...E?.. 01c0: 06 a8 ba c2 00 ee 07 d3 f9 45 59 3a b9 95 b2 4b .........EY:...K 01d0: de fb 1e 35 c4 94 a4 3b b3 68 b9 14 52 a9 2a dc ...5...;.h..R.*. 01e0: 1a e2 a8 95 86 b7 15 22 78 a5 30 27 39 e9 f6 a7 ......."x.0'9... 01f0: e8 e1 ee f2 89 fa df 49 06 7f 6d c3 d0 43 7e 7f .......I..m..C~. 0200: 8f ef 2f 05 84 52 f3 55 19 fd 20 0c f2 fd 68 93 ../..R.U.. ...h. 0210: 78 d6 a4 85 0e 56 86 6f 81 82 8d 1b 4f 40 fa e2 x....V.o....O@.. 0220: 56 13 84 9d c6 f5 ca d7 49 8d 6f 7b 85 4f 93 6f V.......I.o{.O.o 0230: cd 62 9a 67 3b fc 6a 78 37 10 b6 40 b0 2c c6 6a .b.g;.jx7..@.,.j 0240: 73 c0 a0 26 8e 31 e2 25 47 29 e2 89 45 ae f0 ac s..&.1.%G)..E... 0250: 98 7b 41 9e c9 1b 0d 8b ac 2a 2f fd 85 2a fc 7a .{A......*/..*.z 0260: 56 4a bf 0c 74 51 be da ba 69 da 28 32 7e 3c 1c VJ..tQ...i.(2~<. 0270: 92 b9 a8 e3 24 9d 08 ad 15 9b 7a dc 4d 01 97 95 ....$.....z.M... 0280: 75 40 38 e2 52 b8 61 46 e3 d6 d6 65 2c 8b 5b 40 u@8.R.aF...e,.[@ 0290: 0b dc 7d fd f2 52 28 0f 40 94 f0 13 b6 f3 4a 3e ..}..R(.@.....J> 02a0: d8 d2 aa 5a 63 44 12 9b ab ea bf d8 25 0f bf 6f ...ZcD......%..o 02b0: d7 b8 8c fe 06 60 f3 50 da 08 5d d8 ca 4e 5e 7c .....`.P..]..N^| 02c0: 82 1e 10 35 22 5a b3 53 66 10 05 be 9a 3f df 57 ...5"Z.Sf....?.W 02d0: d3 9f 9a a2 12 ff a4 b5 c0 7b f2 d2 5b d7 24 8c .........{..[.$. 02e0: 9d 96 7c 1c 72 c6 5c 69 89 4e 0c f5 f0 53 a5 2c ..|.r.\i.N...S., 02f0: 67 cf c4 5a 32 dd a8 c4 24 ba 17 9a 4c 3b 62 6b g..Z2...$...L;bk 0300: 3b 77 ec 7d 24 e9 14 1b 1a d3 7c e5 22 9a df d7 ;w.}$.....|."... 0310: 00 ba 6a 34 7f 58 c3 db fc ae 59 a1 b8 72 9b 37 ..j4.X....Y..r.7 0320: 25 2f 87 b6 6a 74 a8 c8 dc 35 21 4f d6 70 18 21 %/..jt...5!O.p.! 0330: 77 df 02 03 01 00 01 a3 82 03 3d 30 82 03 39 30 w.........=0..90 0340: 1f 06 03 55 1d 23 04 18 30 16 80 14 6f 1d 35 49 ...U.#..0...o.5I 0350: 10 6c 32 fa 59 a0 9e bc 8a e8 1f 95 be 71 7a 0c .l2.Y........qz. 0360: 30 1d 06 03 55 1d 0e 04 16 04 14 77 82 ee 7e 11 0...U......w..~. 0370: 04 87 18 01 19 95 1e 11 70 db fd a9 67 55 2d 30 ........p...gU-0 0380: 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 05 a0 30 ...U...........0 0390: 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 1d 06 ...U.......0.0.. 03a0: 03 55 1d 25 04 16 30 14 06 08 2b 06 01 05 05 07 .U.%..0...+..... 03b0: 03 01 06 08 2b 06 01 05 05 07 03 02 30 49 06 03 ....+.......0I.. 03c0: 55 1d 20 04 42 30 40 30 34 06 0b 2b 06 01 04 01 U. .B0@04..+.... 03d0: b2 31 01 02 02 4f 30 25 30 23 06 08 2b 06 01 05 .1...O0%0#..+... 03e0: 05 07 02 01 16 17 68 74 74 70 73 3a 2f 2f 73 65 ......https://se 03f0: 63 74 69 67 6f 2e 63 6f 6d 2f 43 50 53 30 08 06 ctigo.com/CPS0.. 0400: 06 67 81 0c 01 02 02 30 3f 06 03 55 1d 1f 04 38 .g.....0?..U...8 0410: 30 36 30 34 a0 32 a0 30 86 2e 68 74 74 70 3a 2f 0604.2.0..http:/ 0420: 2f 47 45 41 4e 54 2e 63 72 6c 2e 73 65 63 74 69 /GEANT.crl.secti 0430: 67 6f 2e 63 6f 6d 2f 47 45 41 4e 54 4f 56 52 53 go.com/GEANTOVRS 0440: 41 43 41 34 2e 63 72 6c 30 75 06 08 2b 06 01 05 ACA4.crl0u..+... 0450: 05 07 01 01 04 69 30 67 30 3a 06 08 2b 06 01 05 .....i0g0:..+... 0460: 05 07 30 02 86 2e 68 74 74 70 3a 2f 2f 47 45 41 ..0...http://GEA 0470: 4e 54 2e 63 72 74 2e 73 65 63 74 69 67 6f 2e 63 NT.crt.sectigo.c 0480: 6f 6d 2f 47 45 41 4e 54 4f 56 52 53 41 43 41 34 om/GEANTOVRSACA4 0490: 2e 63 72 74 30 29 06 08 2b 06 01 05 05 07 30 01 .crt0)..+.....0. 04a0: 86 1d 68 74 74 70 3a 2f 2f 47 45 41 4e 54 2e 6f ..http://GEANT.o 04b0: 63 73 70 2e 73 65 63 74 69 67 6f 2e 63 6f 6d 30 csp.sectigo.com0 04c0: 82 01 7e 06 0a 2b 06 01 04 01 d6 79 02 04 02 04 ..~..+.....y.... 04d0: 82 01 6e 04 82 01 6a 01 68 00 77 00 46 a5 55 eb ..n...j.h.w.F.U. 04e0: 75 fa 91 20 30 b5 a2 89 69 f4 f3 7d 11 2c 41 74 u.. 0...i..}.,At 04f0: be fd 49 b8 85 ab f2 fc 70 fe 6d 47 00 00 01 7b ..I.....p.mG...{ 0500: 64 a7 b0 14 00 00 04 03 00 48 30 46 02 21 00 9b d........H0F.!.. 0510: 56 73 ce 1b 17 33 80 20 4d e5 4f d2 be a2 5d 35 Vs...3. M.O...]5 0520: 33 36 d0 14 8c db 33 55 2d 7b 1d d3 62 ad f7 02 36....3U-{..b... 0530: 21 00 e9 10 ff 14 71 31 ec 71 83 70 ae 06 4f da !.....q1.q.p..O. 0540: 17 9f c4 56 aa e5 f6 fc f6 b6 f3 a7 f9 9d f7 11 ...V............ 0550: 7d e8 00 76 00 41 c8 ca b1 df 22 46 4a 10 c6 a1 }..v.A...."FJ... 0560: 3a 09 42 87 5e 4e 31 8b 1b 03 eb eb 4b c7 68 f0 :.B.^N1.....K.h. 0570: 90 62 96 06 f6 00 00 01 7b 64 a7 b1 23 00 00 04 .b......{d..#... 0580: 03 00 47 30 45 02 20 20 57 7a 5e 8d eb 75 03 39 ..G0E. Wz^..u.9 0590: 57 32 a0 9a ef ac db 45 28 ae f7 2b 76 60 87 0d W2.....E(..+v`.. 05a0: 1c 2d 47 4f bf a3 91 02 21 00 88 2e cf 09 53 19 .-GO....!.....S. 05b0: 49 f1 b0 2d f4 89 92 ea 12 c1 9a 03 bc 62 2b d7 I..-.........b+. 05c0: 16 51 02 f2 42 1e cb 6e 58 ce 00 75 00 29 79 be .Q..B..nX..u.)y. 05d0: f0 9e 39 39 21 f0 56 73 9f 63 a5 77 e5 be 57 7d ..99!.Vs.c.w..W} 05e0: 9c 60 0a f8 f9 4d 5d 26 5c 25 5d c7 84 00 00 01 .`...M]&%]..... 05f0: 7b 64 a7 af f5 00 00 04 03 00 46 30 44 02 20 5f {d........F0D. _ 0600: b0 93 d9 f8 74 af 1d a7 26 f2 67 a0 dc 0e 59 c0 ....t...&.g...Y. 0610: 2e ce 3c 30 a7 b1 6f 6e c9 b8 6e 95 23 09 c5 02 ..<0..on..n.#... 0620: 20 51 b4 4d 58 3f aa a6 75 4b dd 55 49 7e f0 c6 Q.MX?..uK.UI~.. 0630: 29 a9 59 62 7f 06 2d 5d c7 4f dd d9 3b b6 31 3e ).Yb..-].O..;.1> 0640: 9b 30 35 06 03 55 1d 11 04 2e 30 2c 82 0c 6c 64 .05..U....0,..ld 0650: 61 70 31 2e 6e 6f 61 2e 67 72 82 0f 6b 65 72 62 ap1.noa.gr..kerb 0660: 65 72 6f 73 2e 6e 6f 61 2e 67 72 82 0b 6c 64 61 eros.noa.gr..lda 0670: 70 2e 6e 6f 61 2e 67 72 30 0d 06 09 2a 86 48 86 p.noa.gr0...*.H. 0680: f7 0d 01 01 0c 05 00 03 82 02 01 00 50 60 0c a6 ............P`.. 0690: 03 55 61 c3 0d f0 bf ef 0b 5f 65 05 2e 21 a5 46 .Ua......_e..!.F 06a0: 16 b6 29 00 8d 5b 6e 43 6a e6 45 e3 7b b2 25 5a ..)..[nCj.E.{.%Z 06b0: 39 d0 f3 c9 2a 94 f7 14 a4 0c 91 dd bf 09 7d 2e 9...*.........}. 06c0: 56 13 7c 67 37 0e a3 b0 7a 81 a4 7d 69 a2 49 dd V.|g7...z..}i.I. 06d0: 23 97 b6 f1 e0 7f a6 69 a8 fc 08 66 86 a8 e7 56 #......i...f...V 06e0: b5 4c 20 82 42 e7 63 29 ca a5 91 2f c8 88 79 2a .L .B.c).../..y* 06f0: d4 bc 2a 95 38 e4 4b 9f a3 2f 85 41 b9 46 50 d0 ..*.8.K../.A.FP. 0700: 6a 2a 41 c0 72 4c 33 ab 24 69 ea 13 74 48 31 6c j*A.rL3.$i..tH1l 0710: 2b c1 97 ab bc be d2 7d 17 30 2a 7e fe fc df a9 +......}.0*~.... 0720: af 8b 5a 89 45 71 e4 d1 ec 57 d9 6f ef f9 3b db ..Z.Eq...W.o..;. 0730: e0 ad e4 68 b0 21 50 65 27 e3 fa 8e 32 e6 d6 c6 ...h.!Pe'...2... 0740: 7e c8 f7 ed 2f 0e 90 0f 9a ce 0a 4e c4 aa 34 e7 ~.../......N..4. 0750: b5 81 58 05 41 ba 23 57 56 ef 94 a9 45 18 d4 5b ..X.A.#WV...E..[ 0760: 6d 1f 38 ba 0f 76 7a 69 c1 21 01 38 61 60 96 5c m.8..vzi.!.8a`.\ 0770: 16 e4 b7 d7 fa d1 4b 74 e8 8a 70 6e eb d7 88 dc ......Kt..pn.... 0780: a7 dd 45 d3 8c d3 53 b4 44 60 48 42 58 68 12 0f ..E...S.D`HBXh.. 0790: 2f 7a 90 5f 34 43 54 f1 d1 f5 f3 52 1e 3c 78 17 /z._4CT....R.<x. 07a0: 4e 68 80 f6 9b cc 44 66 6f 12 f3 bc b1 81 ea 30 Nh....Dfo......0 07b0: 9f 9f 48 1b 76 b7 b0 5c aa 7d 52 f7 9f f7 a5 66 ..H.v...}R....f 07c0: 6f 3a bf 3f 4e dc 6c 89 0d f1 8b 20 bc 18 a0 dd o:.?N.l.... .... 07d0: f7 21 a7 8b cb bf b4 af c0 9f bc 58 10 5e 52 fa .!.........X.^R. 07e0: 1e af 6e b7 9b 0d 36 4b b0 eb 60 62 df 0f 49 88 ..n...6K..`b..I. 07f0: ed 0e 08 b5 7f 0b 72 a4 e6 3b 28 97 83 46 e1 a5 ......r..;(..F.. 0800: 97 c1 32 c1 b4 a8 b1 c6 d1 75 4f f2 4b 9c 1e d3 ..2......uO.K... 0810: 1d 68 72 b9 af fe ad 3c 49 18 95 ec c2 ea f6 07 .hr....<I....... 0820: 08 24 20 93 61 c7 06 70 dd f9 3b 45 00 2c 10 f5 .$ .a..p..;E.,.. 0830: 0a 4d c1 a7 db b2 b9 04 6a 82 bc 1a ae b2 7c d7 .M......j.....|. 0840: 12 70 94 a2 cb a7 f9 c8 57 8e 76 69 cb 8a d8 e6 .p......W.vi.... 0850: 4d 1f 31 3d 9c 19 95 f3 66 d9 a1 11 9a b3 b5 1d M.1=....f....... 0860: 7a af 3e e9 ee d5 56 39 cf 73 01 4a 2c e1 f3 7e z.>...V9.s.J,..~ 0870: c7 f3 af f6 74 b9 06 f4 5b 1f 4c 73 4f 93 45 a1 ....t...[.LsO.E. 0880: 57 d2 f3 1a 16 6e 37 d3 69 c5 da 42 W....n7.i..B TLS certificate verification: depth: 0, err: 20, subject: /C=GR/ST=Attik\xC3\xAD/L=Athens/O=National Observatory of Athens/CN=ldap1.noa.gr, issuer: /C=NL/O=GEANT Vereniging/CN=GEANT OV RSA CA 4 TLS certificate verification: Error, unable to get local issuer certificate tls_write: want=7, written=7 0000: 15 03 03 00 02 02 30 ......0 TLS trace: SSL3 alert write:fatal:unknown CA TLS trace: SSL_connect:error in error TLS trace: SSL_connect:error in error TLS: can't connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (unable to get local issuer certificate). ldap_err2string ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
I also set slapd to run with params: "-d -1". Here is the log:
# systemctl restart slapd Job for slapd.service failed because a timeout was exceeded. See "systemctl status slapd.service" and "journalctl -xe" for details.
From the journal, some excerpts (it is very long):
Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL_accept:SSLv3 flush data Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL_accept:SSLv3 read client certificate A Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: tls_read: want=5 error=Resource temporarily unavailable Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL_accept:error in SSLv3 read client key exchange A Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL_accept:error in SSLv3 read client key exchange A Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: activity on 1 descriptor Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: activity on: Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=7 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=8 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=9 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=10 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=11 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd[24898]: conn=1001 fd=15 closed (TLS negotiation failure)
...
Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: activity on 1 descriptor Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: activity on: Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=7 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=8 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=9 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=10 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: epoll: listen=11 active_threads=0 tvp=NULL Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_get(15) Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_get(15): got connid=1001 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_read(15): checking for input on id=1001 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: tls_read: want=5, got=5 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 0000: 15 03 03 00 02 ..... Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: tls_read: want=2, got=2 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 0000: 02 30 .0 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL3 alert read:fatal:unknown CA Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS trace: SSL_accept:failed in error Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: TLS: can't accept: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca. Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_read(15): TLS accept failure error=-1 id=1001, closing Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_closing: readying conn=1001 sd=15 for close Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 connection_close: conn=1001 sd=15 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 daemon: removing 15 Oct 21 18:30:42 ldap.noa.gr slapd-cli[24796]: 617187a2 conn=1001 fd=15 closed (TLS negotiation failure)
It shows that the CA/cert has issues. Yet, everything was working fine until last upgrade!
Nick
On 21/10/2021 6:20 μ.μ., Howard Chu wrote:
Run ldapwhoami with -d -1. Also run slapd with -d -1.