[ejabberd] LDAP authentication fails with SSL encryption

Renato Alves rjalves at igc.gulbenkian.pt
Fri Jul 6 21:52:52 MSK 2012


% ldapsearch -H ldap://ldap -b "" -x -s base +
# extended LDIF
#
# LDAPv3
# base <> with scope baseObject
# filter: (objectclass=*)
# requesting: +
#

#
dn:
structuralObjectClass: OpenLDAProotDSE
namingContexts: dc=igc,dc=gulbenkian,dc=pt
supportedControl: 2.16.840.1.113730.3.4.18
supportedControl: 2.16.840.1.113730.3.4.2
supportedControl: 1.3.6.1.4.1.4203.1.10.1
supportedControl: 1.2.840.113556.1.4.1413
supportedControl: 1.2.840.113556.1.4.1339
supportedControl: 1.2.840.113556.1.4.319
supportedControl: 1.2.826.0.1.334810.2.3
supportedExtension: 1.3.6.1.4.1.1466.20037
supportedExtension: 1.3.6.1.4.1.4203.1.11.1
supportedExtension: 1.3.6.1.4.1.4203.1.11.3
supportedFeatures: 1.3.6.1.4.1.4203.1.5.1
supportedFeatures: 1.3.6.1.4.1.4203.1.5.2
supportedFeatures: 1.3.6.1.4.1.4203.1.5.3
supportedFeatures: 1.3.6.1.4.1.4203.1.5.4
supportedFeatures: 1.3.6.1.4.1.4203.1.5.5
supportedLDAPVersion: 3
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: GSSAPI
subschemaSubentry: cn=Subschema

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1


Quoting Gavin Henry on 07/06/2012 06:49 PM:
> On 6 July 2012 16:40, Renato Alves <rjalves at igc.gulbenkian.pt> wrote:
>> By "not sure this ldap server supports starttls" I mean that the LDAP
>> server is rather old. More than 5 years old if I'm not mistaken.
> 
> That's been part of the LDAP v3 spec since 2000, so should be fine.
> 
>> I believe it's running OpenLDAP but I can't determine the exact version.
> 
> What does this return:
> 
> ldapsearch -H ldap://your_directory_server -b "" -x -s base +
> 
> 
> 
> Thanks.
> 
> 
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.jabber.ru/pipermail/ejabberd/attachments/20120706/9832e674/attachment-0001.bin>


More information about the ejabberd mailing list