Am 18.09.19 um 19:32 schrieb Stefan G. Weichinger via
samba:> Am 18.09.19 um 19:28 schrieb Stefan G. Weichinger via samba:
>
>> So I would have to use "adc1.arbeitsgruppe.mydomain.at"
>
> Tried that. Doesn't help so far.
>
> gives:
>
> [2019/09/18 19:32:07.544332, 1]
> ../source4/lib/tls/tls_tstream.c:1439(tstream_tls_retry_handshake)
> TLS ../source4/lib/tls/tls_tstream.c:1439 - A TLS fatal alert has been
> received.
> [2019/09/18 19:32:07.544401, 1]
>
../source4/ldap_server/ldap_extended.c:89(ldapsrv_starttls_postprocess_done)
> ldapsrv_starttls_postprocess_done: accept_tls_loop:
> tstream_tls_accept_recv() - 5:Input/output error =>
> NT_STATUS_IO_DEVICE_ERRORstream_terminate_connection: Terminating
> connection - 'ldapsrv_call_postprocess_done:
call->postprocess_recv() -
> NT_STATUS_IO_DEVICE_ERROR'
>
> again
I assume I have to somehow import the Samba-ADS-CA into pfsense?
I took /var/lib/samba/private/tls/ca.pem and imported that as an
additional CA ...
... and now it works ... I wonder how long ...
thanks so far!