On 06/30/2014 01:05 AM, Kuldeep singh wrote:
> Hi Stephen Gallagher,
> I have changed ldap:// to ldaps:// and http:// to https://. But its
> still not working saying *"WARNING - - LDAP error: {'info': 'A TLS
> packet with unexpected length was received.', 'desc': "Can't contact
> LDAP server"}"*
>
HTTPS is irrelevant. If you're getting 'A TLS packet with unexpected
length was received.' then you're trying to use LDAPS against a
non-LDAPS port. Make sure your LDAP server supports LDAPS on the port
you connect to (or change the port to one that does)
> I don't know why its happening, I received certificate from System Admin
> and placed it in /etc/ssl/certs/ and set path to "TLS_CACERT
> /etc/ssl/certs/dc4.cer" in ldap.conf.
>
> Please help
>
> Kuldeep
>
> On Friday, June 27, 2014 8:46:07 PM UTC+5:30, Stephen Gallagher wrote:
>
> On 06/24/2014 03:38 AM, Kuldeep singh wrote:
> > Hi Stephen,
> >
> > I provided Bind User credentials but now error log displaying
> different
> > *[Tue Jun 24 07:26:53 2014] [error] WARNING:root:LDAP error: {'info':
> > '00002028: LdapErr: DSID-0C090203, comment: The server requires
> binds to
> > turn on integrity checking if SSL\\\\TLS are not already active on
> the
> > connection, data 0, v23f0', 'desc': 'Strong(er) authentication
> required'}
> > *
> > Please let me know if any server certificate required for
> authentication.
> >
>
>
> Yes, what your server is doing is telling you that it won't allow
> you to
> bind over an unencrypted connection. This means that you need to set
> Review Board up to use either an ldaps:// (SSL) connection or use TLS.
> This will also mean setting up your Review Board server to be
> capable of
> trusting the CA certificate that was used to sign the LDAP server
> certificate (this has to be left as an exercise to the reader, as it's
> different on different systems, even different Linux systems. Contact
> your system administrator for help)
>
> --
> Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
> ---
> Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
> ---
> Happy user? Let us know at http://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google
> Groups "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected]
> <mailto:[email protected]>.
> For more options, visit https://groups.google.com/d/optout.
--
Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
---
Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
---
Happy user? Let us know at http://www.reviewboard.org/users/
---
You received this message because you are subscribed to the Google Groups
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
