SSL and AD

[geert.van.muylem at utimaco.be]

Hi All,

Strange things are happening: It sometimes works. I can sometime make an 
ssl connection with client authentication,
search for some entries,,,

What could be the reason? some network timeout issues?

Regards,
Geert





Michael Ströder <michael at stroeder.com>
Sent by: python-ldap-dev-bounces at lists.sourceforge.net
10/17/2006 03:21 PM
 
        To:     geert.van.muylem at utimaco.be
        cc:     python-ldap-dev at lists.sourceforge.net
        Subject:        Re: SSL and AD


geert.van.muylem at utimaco.be wrote:
>
> 
ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,'/home/gvm/Temp/PYSSL/rootca.pem')

Does rootca.pem contain the cert of
/C=BE/L=Hoogstraten/O=CATrust/OU=PKI/CN=CAS_SK?
Or is there also an intermediate CA?

>     ldap.set_option(ldap.OPT_X_TLS_CERTFILE,
> '/home/gvm/Temp/PYSSL/endor-crt.pem')
>
> 
ldap.set_option(ldap.OPT_X_TLS_KEYFILE,'/home/gvm/Temp/PYSSL/endor-key.pem')

Are you sure AD is configured to allow SSL client authentication?

>     lconn=ldap.initialize("ldaps://eowyn.doom.be/")
>     lconn.simple_bind_s ('Administrator at doom.be','system')
>     lconn.unbind_s()

Seems ok. But I hope you know that using the UPN instead of a bind DB
with simple_bind_s() is proprietary feature of MS AD.

Ciao, Michael.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job 
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Python-LDAP-dev mailing list
Python-LDAP-dev at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-ldap/attachments/20061017/a2ab5fd1/attachment.html>