Re: [squid-users] basic_ldap_auth problem under Fedora

On 06/03/2014 08:00 PM, Amos Jeffries wrote:
> On 3/06/2014 8:23 a.m., Jose-Marcio Martins wrote:

>
> What do you see running it manually with that command line?

Good hint. The same thing, see below. And problem solved !!!

> If its crashing you could also try running it under a debugger to find
> out why.

In fact it doesn't crash. It terminates as this is the normal behavior of the helper when TLS
connection fails.

In fact the problem comes from outside the helper. TLS connection fails because openldap libraries
do check the validity of server certificate. Although it's a valid certificate, it fails... 8-(

The solution is to put this lines in /etc/openldap/ldap.conf :

TLS_REQCERT never
TLS_CRLCHECK none

Maybe it could be a good idea to force this from inside the helper as ldap.conf is a server wide
configuration and, for some people, not so easy to debug.

Thanks for the hint.

--