Can somebody tell me what this error means (server, domain etc. changed
to protect the innocent)?
ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D
cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory
ldap_start_tls: Connect error (-11)
additional info: TLS error -8023:A PKCS #11 module returned
CKR_DEVICE_ERROR, indicating that a problem has occurred with the token
or slot.
My google searches do not seem to provide any useful information. I am
just looking for some hints as to what to look for in my configuration.
I just don't know how to interpret this error message. I am sure it is
trying to tell me something but I just don't know what.
What is really strange is I have a second ldap server which replicates
with this one. It works fine so I am pretty convinced the problem is not
with the ldap configuration but rather something with the certificates
and/or the setup.
Thanks.
--
Paul (ganci at nurdog.com)
(303)257-5208
On 03/30/2015 07:28 PM, Paul R. Ganci wrote:> Can somebody tell me what this error means (server, domain etc. > changed to protect the innocent)? > > ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D > cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory > ldap_start_tls: Connect error (-11) > additional info: TLS error -8023:A PKCS #11 module returned > CKR_DEVICE_ERROR, indicating that a problem has occurred with the > token or slot.It turns out the release of 7.1 was most propitious. I updated and instead of getting the error above I received a different error: TLS error -8182: Peer's certificate has an invalid signature That was a much more useful error message in that at least I knew what the complaint was about. It turns out I was using an incorrect key. I fixed that and the problem went away. So glad I went ahead with the update or I would still be wondering what was wrong. -- Paul (ganci at nurdog.com) (303)257-5208