Home page logo

basics logo Security Basics mailing list archives

Issue with ldap over SSL
From: "Jennifer Fountain" <jfountain () rbinc com>
Date: Wed, 17 Mar 2004 14:05:51 -0500

I am currently trying to get AD authenitication for linux.  I have
everything working (login, groups, etc) but I cannot get ldapssl working

I am currently getting this in my logs:

nss_ldap: could not search LDAP server - Referral
And I keep getting a segmentation fault when I try to su - user or id -

Here is my config:

host x.x.x.x
#port 636

base dc=xxx,dc=com

ldap_version 3

binddn anonymous () xxx com

scope sub

ssl no
#ssl yes

pam_filter objectclass=user
pam_login_attribute sAMAccountName
pam_password ad

nss_base_passwd         ou=xx,dc=xxx,dc=com?one
nss_base_shadow         ou=xx,dc=xxx,dc=com?one
nss_base_group          ou=xx,dc=xxx,dc=com?one

nss_map_objectclass posixAccount User
nss_map_attribute uid sAMAccountName
nss_map_attribute uniqueMember Member
nss_map_attribute userPassword msSFUPassword
nss_map_attribute homeDirectory msSFUHomeDirectory
nss_map_objectclass posixGroup Group
nss_map_attribute cn sAMAccountName

My AD server is listening on port 636 and I can connect to it with the
ldp.exe tool on that port. I have Cert Services installed and I verified
the cert is in the personal and the trusted stores.  Does anyone have
any ideas on what I may be doing wrong?

Kind Regards,

Jennifer Fountain
3400 E. Walnut Street
Colmar, PA 18915

Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:

  By Date           By Thread  

Current thread:
  • Issue with ldap over SSL Jennifer Fountain (Mar 18)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]