HI Team,

Hope you can help with this issue.

1)I am trying to disable SSLV3 on OpenLDAP servers we are using OpenLDAP as a 
proxy with upstream Active directory servers. we are using CA certs on this 
openssl we would like to disable SSLV3
I added the below entry slapd.conf but when I tried to start slapd it's failing 
to start

TLSCipherSuite HIGH:MEDIUM:!SSLv2:!SSLV3

errors as below
slapd[19899]: main: TLS init def ctx failed: -1
slapd[19899]: slapd stopped.
slapd[19899]: connections_destroy: nothing to destroy.

debug logs restart as below

TLS: could not set cipher list HIGH:MEDIUM:!SSLv2:!SSLV3.
617c64c1 main: TLS init def ctx failed: -1
617c64c1 slapd stopped.

2) Also, did anybody notice this issue?
I am facing the issue with a group display we have several users in group while 
looking for groups in getent group we are seeing a few users only not sure if 
there is any limit on group filed in Database.


Thanks
Narayanan
Linux Platform Engineering
500 Staples Drive, Framingham MA
Office:  508-253-6909 | Mobile: 508-333-4395
[signature_1767107679]

Reply via email to