Hanging during ldaps

[Goucher, Adam]

> ># search so we know we are connected
> >p_search = p_handle.search("", ldap.SCOPE_BASE, "objectclass=*")
> >  
> >
> This call looks strange to me: iPlanet has always wanted a real base 
> there (i.e., no "" as you possibly could using Active 
> Directory, but a 
> correct search base for your server like "dc=ldapserver, dc=acme, 
> dc=com" or similar).
> 
> If you say it does work using plain LDAP, however, this cannot be the 
> reason for your script hanging, still I'm amazed it does, the RFC 
> clearly states that you must explicitly set the search base 
> and iPlanet 
> have always prided themselves in being standards compliant (not like 
> that other major software vendor ;-)

I have found that "" and an actual basename are two different items with
pretty much all directory servers I have used. Searching against "" will
return information about the server in general (such as the vendor and
version) whereas searching against a proper basename gives you site
specific information
 
> I don't know this module, however you might want to give a try to my 
> Win32 binary of Python-LDAP, you can find it at 
> http://www.siosistemi.it/~mcicogni/ at the beginning of the 
> page under 
> "Python stuff".
> Beware, your mileage may vary.

Same problem, but a newer build, thanks. :)

> If this doesn't work, either, it *might* be that your server isn't 
> configured correctly (i.e., TLS Certificates and such): do 
> other LDAPS 
> client work?

Yes, I can login with different client to the ssl port. Is there a TLS
FAQ kicking around somewhere? I keep seeing it used interchangeably with
SSL but don't know anything about it.

-adam