I can't configure ldaps on macos

[gabriiellduarte]

Hello, I'm wanting to activate ldaps to change passwords, I configure it as in the manual but when I go to do the test it always gives the error ldap_bind(): Unable to bind to server: Can't contact LDAP server. Error Code: [-1] Diagnostic Message: null
I'm on a machine on the same network as the server the port test gives ok but does not authenticate. Any specific solution?

[gabriiellduarte]

my ldap.conf

[gabriiellduarte]

@stevebauman can you help me?

[stevebauman]

Hi @gabriiellduarte, an ldap.conf file is only necessary if you've enabled TLS.

Set use_tls to true inside of your configuration and use_ssl to false, and then paste this inside of your ldap.conf file:

TLS_REQCERT never

This should be all that's needed to test connectivity over TLS. Once you can confirm connectivity, you can then start testing with a valid certificate.

[gabriiellduarte]

With tls via port 389 or 636 I have this error

[stevebauman]

You must use port 389 with TLS. Using port 636 is for SSL.

Does your LDAP server support TLS? The error is displaying “Not supported”. Do you have any other services that connect via TLS to your LDAP server?