Troubleshooting OpenLDAP errors


5cbe470e conn=1024 op=1 MOD dn="cn=config"
5cbe470e conn=1024 op=1 MOD attr=olcTLSCipherSuite olcTLSCACertificateFile olcTLSCertificateFile olcTLSCertificateKeyFile olcTLSDHParamFile olcTLSVerifyClient
5cbe470e conn=1024 op=1 RESULT tag=103 err=80 text=
5cbe470e conn=1024 op=2 UNBIND
5cbe470e conn=1024 fd=12 closed
ldap_modify: Other (e.g., implementation specific) error (80)
modifying entry "cn=config"

  1. Check your TLS certificates exist

in my case the error was caused due to Version 1 in TLS certificate

WITSC02X6385JGH:temp sjain68$ openssl x509 -in abcl.pem -text -noout
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 14676524023181422786 (0xcbad7cd6eb3730c2)

Once I fixed the certificate so that it had Version 3 the error went away. To get a version 3 certificate, make sure you add the -extensions option to openssl ca command if you are using openssl ca to generate the certificate.

Advertisements
This entry was posted in Software. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s