<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">I am having this same issue. Did you ever find/get a solution?<DIV><BR class="khtml-block-placeholder"></DIV><DIV><BR><DIV><DIV>On Mar 21, 2007, at 11:23 AM, rickan wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><DIV>Hi guys,</DIV> <DIV> </DIV> <DIV>I am trying to establish a secure connection between freeradius and a Novell eDirectory LDAP server. After configuring LDAP in radiusd.conf it seemed to work, almost:</DIV> <DIV> </DIV> <DIV>rlm_ldap: ldap_get_conn: Checking Id: 0<BR>rlm_ldap: ldap_get_conn: Got Id: 0<BR>rlm_ldap: attempting LDAP reconnection<BR>rlm_ldap: (re)connect to <A href="http://192.168.1.5:636">192.168.1.5:636</A>, authentication 0 <BR>rlm_ldap: setting TLS mode to 1<BR>rlm_ldap: setting TLS CACert File to /usr/local/etc/raddb/ldap_ca_cert.pem<BR>rlm_ldap: setting TLS Require Cert to demand<BR>rlm_ldap: starting TLS<BR>rlm_ldap: ldap_start_tls_s()<BR> rlm_ldap: could not start TLS Operations error<BR>rlm_ldap: (re)connection attempt failed<BR> </DIV> <DIV>Because I don't know how to get logs from the eDirectory side, I recorded the traffic between both hosts and saw that the TLS handshake had been done, both mashines had exchanged cipher key and begun to send data. After 3 or 4 packets the LDAP server sent a "encrypted alert" and disconnected. Since these data are encrypted I could not see what happened indeed. </DIV> <DIV> </DIV> <DIV>My question: is it possible to get more debug info from the freeradius side? If yes, how? </DIV> <DIV> </DIV> <DIV>Thanks,</DIV> <DIV> </DIV> <DIV>Rickan</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">-<SPAN class="Apple-converted-space"> </SPAN></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</A></DIV> </BLOCKQUOTE></DIV><BR><DIV> <SPAN class="Apple-style-span" style="border-collapse: separate; border-spacing: 0px 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; text-align: auto; -khtml-text-decorations-in-effect: none; text-indent: 0px; -apple-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><DIV>Brad Lachel</DIV><DIV><A href="mailto:stuff@d155.org">stuff@d155.org</A></DIV><DIV><BR class="khtml-block-placeholder"></DIV><BR class="Apple-interchange-newline"></SPAN> </DIV><BR></DIV></BODY></HTML>
<br><hr style="BORDER:#000000; COLOR:#000000;" align="left" width="400" noShade SIZE="2">
<FONT color="#000000" size="2"><i>All e-mail to and from this address is subject to the Acceptable Use Policies of Community High School District #155. All e-mail may be monitored and/or disclosed to third parties. Any views or opinions presented in an e-mail are solely those of the author and may not represent those of Community High School District #155.</i></FONT><br>
<a href="http://www.d155.org"><FONT size="2" face="Gill Sans, Arial" color="#0000FF">http://www.d155.org</FONT></a>