2

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it gives this message ldap_bind: Confidentiality required (13). Help please

2 Answers 2

4

From the openldap site I found this that should help you

Normally the error message in your subject is as a result of the server requiring encryption of some kind. For example, you might have set:

security tls=1

or similar, in which case you need to use ldaps:// or start_tls (-Z):

[bgmilne@comanche ~]$ ldapsearch -x -LLL "(uid=bgmilne)" 1.1
ldap_bind: Confidentiality required (13)
        additional info: TLS confidentiality required
[bgmilne@comanche ~]$ ldapsearch -Z -x -LLL "(uid=bgmilne)" 1.1
dn: uid=bgmilne,ou=People,dc=ranger,dc=dnsalias,dc=com

A quick summery is open a terminal and use

ldaps://

or

start_tls (-Z):

To start your prosses

7
  • this command shows nothing Aug 23, 2014 at 11:46
  • Did you try both
    – Mark Kirby
    Aug 23, 2014 at 11:46
  • Does the following mean anything to you You must have a "ssf" setting in your slapd.conf/slapd.d
    – Mark Kirby
    Aug 23, 2014 at 11:49
  • yes I try both of them but I don't know about ssf Aug 23, 2014 at 11:51
  • I dont use the program so just trying to troubleshoot here : Does this mean anything to you : Turn on the "Allow Clear Text Password" or tick off the "Required TLS for simple binds with password" box on the LDAP Group object in ConsoleOne
    – Mark Kirby
    Aug 23, 2014 at 11:56
0

In /etc/ldap/ldap.conf, set:

SSL start_tls
TLS_REQCERT never

(Add the second line if you're using a self-signed certificate.)

2
  • not working again I am getting the same error message Aug 23, 2014 at 11:44
  • The answer is below. add -Z to ldapsearch
    – NicoKowe
    Aug 7, 2019 at 14:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .