ldaps authentication not working

[consultorpc]

Hello,

We are using zabbix 1.6.4, and were trying to configure ldaps for user authentication with zabbix. Unfortunately, the ldaps is not working for us.
I think the certificates and other settings are already working, because I can successfully run ldapsearch command with ldaps://abc.server.com and can get its results.


On Zabbix web interface, If I enter ldap://abc.server.com with port 389 is able to authenticate with ldap server. for ldaps authentication I gave the following details:

Default Authentication : LDAP
LDAP Host : ldaps://abc.server.com
Port : 636

and tried with the same other values as I did for ldap://abc.server.com.

When clicked on Test button, the web interface shows warning message:

ldap_bind() [<a href='function.ldap-bind'>function.ldap-bind</a>]: Unable to bind to server: Can't contact LDAP server[/var/www/html/zabbix/include/classes/cldap.inc.php:116]

LDAP: cannot bind by given DN

and the ldap server log shows:

Apr 24 10:48:07 server slapd[9331]: conn=0 fd=14 ACCEPT from IP=x.x.x.x:32765 (IP=0.0.0.0:636)
Apr 24 10:48:07 server slapd[9331]: conn=0 fd=14 closed (TLS negotiation failure)

I am not sure, whether it is a certificate error, because it is working fine for ldaps:/// with ldapsearch command.

Please help us to solve this issue.

Thanks in Advance

consultorpc

[achu_sab]

To get the ldaps:// work, on your zabbix server's /etc/openldap/ldap.conf file, add the following value:

TLS_REQCERT allow

or you can use

TLS_REQCERT never

[EnriqueI]

To get the ldaps:// work, on your zabbix server's /etc/openldap/ldap.conf file, add the following value:

TLS_REQCERT allow

or you can use

TLS_REQCERT never

Neither work for me, although LDAP (unsecured) does.