<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: [rt-users] ExternalAuth TLS to Active DirectoryLDAP_OPERATIONS_ERROR 1 on Bind</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<BR>
<P><FONT SIZE=2>Looking at a tcpdump, as soon as the ldap server returns "Server Hello Done" the RT server sends a FIN/ACK to close the connection, this all happens prior to the bind attempt, so when the bind attempt happens, it fails.<BR>
<BR>
I have "verify=>'none'" set in the start_tls command, but still nothing...<BR>
<BR>
Thoughts?<BR>
<BR>
Nicola<BR>
<BR>
-----Original Message-----<BR>
From: rt-users-bounces@lists.bestpractical.com on behalf of Foggi, Nicola<BR>
Sent: Wed 11/18/2009 1:41 PM<BR>
To: rt-users@lists.bestpractical.com<BR>
Subject: [rt-users] ExternalAuth TLS to Active DirectoryLDAP_OPERATIONS_ERROR 1 on Bind<BR>
<BR>
<BR>
Hey Everyone,<BR>
<BR>
So I got the ExternalAuth module working to Active Directory NON TLS enabled, however, when I set it to use TLS I get a:<BR>
<BR>
LDAP_OPERATIONS_ERROR<BR>
<BR>
returned on the bind. I'm looking at ways to troubleshoot it, i have tls set to verify=>none so it shouldn't be a certificate problem, but i'm at a loss of other ways to troubleshoot/track down the problem.<BR>
<BR>
A stand alone perl script that i wrote to test with that calls Net::LDAP and start_tls binds ok from the box, so that even made it more confusing.<BR>
<BR>
Any thoughts? <BR>
<BR>
Nicola<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>