Can't connect to LDAP using SSL

[Hi-Liter]

Hello,
I am currently trying to connect FreeNAS 9.1.1 to my LDAP server (ClearOS 6.4 using OpenLDAP). The LDAP server uses SSL and listens on port 636. I can successfully connect to LDAP from my Windows machine using Apache Directory Studio and on the FreeNAS machine, the command

ldapsearch -x -v -H "ldaps://clearos.schnigges.lan" "uid=testclear"

results in the following output:

Code:

ldap_initialize( ldaps://clearos.schnigges.lan:636/??base )
filter: uid=testclear
requesting: All userApplication attributes
# extended LDIF
#
# LDAPv3
# base <dc=schnigges,dc=lan> (default) with scope subtree
# filter: uid=testclear
# requesting: ALL
#
 
# search result
search: 2
result: 32 No such object
 
# numResponses: 1

(not sure why the entry is not found, but at least the connection works).

When trying to start the directory service in the FreeNAS UI, I get the following error in /var/log/messages:

Code:

Nov 19 21:03:52 Schnigges-NAS LDAP: /usr/sbin/service ix-ldap quietstart
Nov 19 21:03:54 Schnigges-NAS LDAP: /usr/sbin/service ix-nsswitch quietstart
Nov 19 21:03:54 Schnigges-NAS LDAP: /usr/sbin/service ix-pam quietstart
Nov 19 21:03:55 Schnigges-NAS LDAP: /usr/sbin/service ix-samba quietstart
Nov 19 21:05:48 Schnigges-NAS LDAP: /usr/local/bin/python /usr/local/www/freenasUI/middleware/notifier.py start cifs
Nov 19 21:07:45 Schnigges-NAS notifier: dbus already running? (pid=47909).
Nov 19 21:07:45 Schnigges-NAS notifier: Starting avahi-daemon.
Nov 19 21:07:45 Schnigges-NAS notifier: Daemon already running on PID 47938
Nov 19 21:07:46 Schnigges-NAS notifier: Removing stale Samba tdb files: ....... done
Nov 19 21:07:46 Schnigges-NAS notifier: Starting nmbd.
Nov 19 21:07:46 Schnigges-NAS notifier: Starting smbd.
Nov 19 21:07:46 Schnigges-NAS smbd[49717]: [2013/11/19 21:07:46.159760,  0] lib/smbldap.c:1225(smbldap_connect_system)
Nov 19 21:07:46 Schnigges-NAS smbd[49717]:   failed to bind to server ldap://clearos.schnigges.lan:636 with dn="cn=manager,ou=Internal,dc=schnigges,dc=lan" Error: Can't contact LDAP server
Nov 19 21:07:46 Schnigges-NAS smbd[49717]:       (unknown)
Nov 19 21:07:46 Schnigges-NAS LDAP: /usr/sbin/service ix-ldap status

For some reason (don't know if it is just the output that is wrong or the actual command), smbd tries to connect using ldap:// instead of ldaps:// (is this a bug?).

My settings look like this:

Another info: I already changed the localsid on the FreeNAS machine as suggested in https://bugs.freenas.org/issues/1158

Any ideas what is going wrong?

 

[dlavigne]

Please create a separate bug for this ldap instead of ldaps issue and post the issue number here.

 

[Hi-Liter]

Created a new issue: https://bugs.freenas.org/issues/3466