Netware Webserver - Secure LDAP not working

Author

Secure LDAP not working

April Simmons

2006-05-02, 7:11 pm

Please let me know if this is the incorrect forum for this question.

NetWare 6.5 SP4

We renamed the server and I cannot get Secure LDAP port 636 to work. We followed TID 10080951 for renaming the server and everything seems to be okay except for this. However, we cannot figure out how to recreate the NDS object: IP AG

I tried PKIDIAG 4,5,6,0, but it still doesn't work. I get no errors with it either. I checked the hosts / hostname files. DNS is working fine.

Within TCPCON, LDAP 443 is listening. 636 is not listening.

The SSL CertificateIP is valid, as I can get to port 8009 fine.

NLDAP appears to load fine with no apparent errors.

I verified that within the ldapconfigversion attribute in both the LDAP Group and LDAP Server is set to 8 - it wasn't, it had a 0 in that attribute after I recreated them. I verified that both the Group and Server have the proper NDS rights to the objects (server...).

I verified that Require TLS for simple binds is not checked in the LDAP Group.

I can't run tckeygen since it is listening on port 636. I did try editing the tckeygen file and changing 'localhost' to the server's IP address, and changing the 636 to a 443, and running it. That got rid of the 'connection refused' error when importing certificate to keystore, but 636 is still not showing after refreshing NLDAP.

Sorry if some of the info above doesn't pertain to Secure LDAP, but more info is better than not enough. Any thoughts on where to look next?

Thanks - April

Automatic reply

2006-05-09, 7:11 am

April,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/