Zabbix ldap authentication with ssl

[spidernik84]

Hello,
I've succesfully configured my zabbix setup with Openldap authentication. So far so good!
I've then tried to setup ldap over ssl, but the test fails giving these two errors:

ldap_bind(): Unable to bind to server: Can't contact LDAP server[/usr/share/zabbix/include/classes/class.cldap.php:114]
LDAP: cannot bind by given Bind DN

I kept the same configuration as the ldap without ssl, just changing the port to 636 and the uri to ldaps://...

I extracted the ldap server certificate with openssl s_client, taking care of copying the cert part (from and including ---begin certificate--- to and including ---end certificate---) to a .pem file, and placing it in /etc/ssl/certs/. At this point, I ran "c_rehash".
I can telnet to the ldap server on port 636, so it doesn't seem a firewall problem.

That's all I did. Is there some step I'm missing?
I can't seem to find a guide on how to configure openldap over ssl and zabbix.

Thank you!

Zabbix 1.8.5 on ubuntu server 10.04
Openldap on ubuntu server 10.04

[gelowe]

LDAPS = Pain in the Rump

I had to look at several articles, make sure you can connect with command line ldaps util

also there is a setting to add to \etc\ldap\ldap.conf
TLS_REQCERT never


here are some helpful urls

http://adldap.sourceforge.net/wiki/doku.php?id=ldap_over_ssl

http://serverfault.com/questions/189...rity-to-ubuntu

http://support.microsoft.com/kb/555252

[spidernik84]

Thanks, let's have a look.