[Fedora-directory-users] Setting up a Debian client for ssl

[Steven Jones]

I have almost have a debian client working but it has a small error, the
first login fails but the second succeeds....

/etc/pam_ldap.conf looks like this,

# LDAP Defaults
#
 

# See ldap.conf(5) for details
# This file should be world readable but not world writable.
#pam_password exop
BASE dc=vuw,dc=ac,dc=nz
#URI     ldap://ldap.vuw.ac.nz
base dc=vuw,dc=ac,dc=nz
#ssl no
ssl on
pam_password md5
BASE dc=vuw,dc=ac,dc=nz
tls_cacertfile /etc/ssl/certs/ldap/ca.crt
TLS_REQCERT allow
#TLS_REQCERT never
host ldap.vuw.ac.nz
ssl start_tls

log output for ssh connections has "startTLS",

[root at vuwunicvfdsm001 logs]# > access
[root at vuwunicvfdsm001 logs]# tail -f access
[18/Sep/2007:07:19:26 +1200] conn=2409 fd=71 slot=71 connection from
130.195.87.235 to 130.195.87.249
[18/Sep/2007:07:19:26 +1200] conn=2409 op=0 EXT
oid="1.3.6.1.4.1.1466.20037" name="startTLS"
[18/Sep/2007:07:19:26 +1200] conn=2409 op=0 RESULT err=0 tag=120
nentries=0 etime=0
[18/Sep/2007:07:19:26 +1200] conn=2409 SSL 256-bit AES
[18/Sep/2007:07:19:30 +1200] conn=2409 op=2 BIND dn="" method=128
version=3
[18/Sep/2007:07:19:30 +1200] conn=2409 op=2 RESULT err=0 tag=97
nentries=0 etime=0 dn=""
[18/Sep/2007:07:19:30 +1200] conn=2409 op=3 SRCH
base="dc=vuw,dc=ac,dc=nz" scope=2 filter="(uid=jonesst1)" attrs=ALL
[18/Sep/2007:07:19:30 +1200] conn=2409 op=3 RESULT err=0 tag=101
nentries=1 etime=0
[18/Sep/2007:07:19:30 +1200] conn=2409 op=4 BIND
dn="uid=jonesst1,ou=People,dc=vuw,dc=ac,dc=nz" method=128 version=3
[18/Sep/2007:07:19:30 +1200] conn=2409 op=4 RESULT err=0 tag=97
nentries=0 etime=0 dn="uid=jonesst1,ou=people,dc=vuw,dc=ac,dc=nz"
[18/Sep/2007:07:19:30 +1200] conn=2409 op=5 BIND dn="" method=128
version=3
[18/Sep/2007:07:19:30 +1200] conn=2409 op=5 RESULT err=0 tag=97
nentries=0 etime=0 dn=""
[18/Sep/2007:07:19:30 +1200] conn=2409 op=6 UNBIND
[18/Sep/2007:07:19:30 +1200] conn=2409 op=6 fd=71 closed - U1

So I just need to figure out why the first attempt fails but the second
succeeds.

Regards

Steven Jones
Senior  Linux/Unix/San/Vmware System Administrator
APG -Technology Integration Team
Victoria University of Wellington
Phone: +64 4 463 6272