rlm_ldap (ldap): Failed setting connection option new TLS context: Unknown error

[Alan DeKok]

On Oct 15, 2019, at 4:59 AM, Shem Pasamba via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> 
> I have a problem connecting to an ldaps:// server using freeradius-ldap in
> Ubuntu 18.04, it says, when I run freeradius -X -xxx:
> Tue Oct 15 16:47:55 2019 : Debug: rlm_ldap (ldap): Connecting to ldaps://
> ldap.aiias.edu:636
> Tue Oct 15 16:47:55 2019 : Debug: rlm_ldap (ldap): New libldap handle
> 0x564a538dda60
> Tue Oct 15 16:47:55 2019 : Error: rlm_ldap (ldap): Failed setting
> connection option new TLS context: Unknown error

  Hmm... unhelpful errors from libldap. 

> Here's what I did:
> Installed freeradius using 'apt-get install freeradius-ldap'
> then modified /etc/freeradius/3.0/mods-available/ldap to have:
>        server = 'ldaps://ldap.aiias.edu'
>        port = 636
>        identity = 'cn=Administrator,cn=users,dc=aiias,dc=edu'
>        password = not-the-real-password
>        base_dn = 'dc=aiias,dc=edu'
> 
>        tls {
>                certificate_file = ${certdir}/aiias-edu.crt
>                private_key_file = ${certdir}/aiias-edu.key
>        }
> then linked mods-available/ldap to ../mods-enabled/ldap

  That should generally work.  Without any useful message from libldap, it's hard to say what's going wrong.

  Alan DeKok.