Fedora directory users - Dec 2008 - config of SSL on ADs and FDS

is that someone can provide me with detailed documents sharing certificates
between MS. Active Directory and Fedora Directory Server, because the
connection via port 636 do not want to walk.
I have this error log file in windows sync.

12/25/08 11:48:28: Backoff time expired.  Attempting sync
12/25/08 11:48:28: Password list has 6 entries
12/25/08 11:48:28: Ldap bind error in Connect
    81: Can''t contact LDAP server
12/25/08 11:48:28: Can not connect to ldap server in SyncPasswords
12/25/08 11:48:28: Backing off for 16000ms


but with the ports 389 synchronizes this information, but the password does
not want to be synchronized.
you can help me plz.

Abdellah Alaoui Ismaili wrote:
> is that someone can provide me with detailed documents sharing 
> certificates between MS. Active Directory and Fedora Directory Server, 
> because the connection via port 636 do not want to walk.
> I have this error log file in windows sync.
Have you enabled TLS on FDS and ADS? PasswordSync without TLS doesn''t
work.

for the configuration of SSL in SDS I followed this link  ''
http://www.csse.uwa.edu.au/ ~
ashley/fedora-ds/fedora-ds-26072006.html'', and
the configuration of ADs I followed the paper redhat directory server ...
I do not know how to share the same certificate for both directory.
and with an LDAP browser I can check the contents of the directory via the
port 636.

---------- Forwarded message ----------
From: Abdellah Alaoui Ismaili <abdellah.alaoui2006@gmail.com>
Date: 2008/12/25
Subject: Re: [Fedora-directory-users] config of SSL on ADs and FDS
To: fedora-directory-users@redhat.com


for the configuration of SSL in FDS I followed this link  ''
http://www.csse.uwa.edu.au/~ashley/fedora-ds/fedora-ds-26072006.html<http://www.csse.uwa.edu.au/%7Eashley/fedora-ds/fedora-ds-26072006.html>'',
and the configuration of ADs I followed the paper redhat directory server
...
I do not know how to share the same certificate for both directory.
and with an LDAP browser I can check the contents of the directory via the
port 636.

Abdellah Alaoui Ismaili wrote:
> for the configuration of SSL in FDS I followed this link  
>
''http://www.csse.uwa.edu.au/~ashley/fedora-ds/fedora-ds-26072006.html
>
<http://www.csse.uwa.edu.au/%7Eashley/fedora-ds/fedora-ds-26072006.html>'',
> and the configuration of ADs I followed the paper redhat directory 
> server ...
> I do not know how to share the same certificate for both directory.
> and with an LDAP browser I can check the contents of the directory via 
> the port 636.
you find all relevant information on this page:

http://directory.fedoraproject.org/wiki/Howto:SSL

I can not install the certificate in Active Directory 2003 ...
I type that under Fedora.
# openssl s_client -host  dc.sers.ma  -port 636
I get this error.
Verify return code: 21 (unable to verify the first certificate).
is that someone has an ides.