Hi,
I'm configuring Samba 3.0 to store users in ldap server.
I've configured openldap 2.1 with SSL and it worked properly with ldap
commands but when
I try using then smbpasswd command it reports me the error:
failed to bind to server with dn= cn=Manager,dc=openwired,dc=net Error:
Can't contact LDAP server
TLS: hostname does not match CN in peer certificate
Connection to LDAP Server failed for the 1 try!
Connection to LDAP Server failed for the 2 try!
...
I had the same error with ldapadd, ldapsearch, etc but I corrected it
setting CN=ibox.desarrollo.com (Fully Qualified Domain Name).
Why Samba doesn'tmatch the CN attribute and the hostname????
Thank you very much.
Some information:
ibox# hostname -f
ibox.desarrollo.com
ibox# nslookup
ibox.desarrollo.com --> 10.0.0.80 (Is the correct IP).
Certificate information:
ibox# openssl x509 -text -noout -in /usr/local/openldap2.1/ssl/servercrt.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=ES, ST=Barcelona, L=Barcelona, O=OpenWired SL,
OU=ibox, CN=iboxCA
Validity
Not Before: Dec 4 17:40:37 2003 GMT
Not After : Dec 3 17:40:37 2004 GMT
Subject: C=ES, ST=Barcelona, L=Barcelona, O=OpenWired SL,
OU=ibox, CN=ibox.desarrollo.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:ad:aa:92:8a:12:b2:74:dd:a0:5f:fc:1f:3a:be:
98:0c:4a:bd:81:a0:20:81:7c:4b:97:86:9a:9d:cc:
eb:a3:ec:31:22:92:41:25:3f:5a:2e:81:14:3a:16:
87:74:cc:82:35:fd:62:20:ca:f5:36:1e:5c:bc:27:
7b:5d:02:db:b9:5d:c2:13:79:d3:05:76:47:8d:dd:
43:12:f0:8f:5b:4a:cd:74:42:cf:ed:93:e9:94:3b:
58:12:77:8f:3a:d1:b2:46:95:45:56:f5:58:ab:f3:
77:6a:04:be:1d:b8:84:ca:3a:c9:aa:28:e7:4a:6a:
cd:75:86:83:ac:b7:bf:5f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
OpenSSL Generated Certificate
X509v3 Subject Key Identifier:
9E:EB:78:6D:50:16:51:05:1E:6C:8A:EA:5B:D0:83:01:35:B1:A5:F6
X509v3 Authority Key Identifier:
keyid:28:F8:69:7D:76:80:93:64:1A:F7:88:37:35:6F:36:6E:62:67:AB:4A
DirName:/C=ES/ST=Barcelona/L=Barcelona/O=OpenWired
SL/OU=ibox/CN=iboxCA
serial:00
Signature Algorithm: md5WithRSAEncryption
1f:70:cf:ed:15:bf:81:4b:d5:e6:6c:6b:62:bd:9a:57:76:6b:
67:f1:3c:b8:87:9a:e1:8e:0a:f2:13:f0:e3:a7:db:b2:34:ca:
53:3b:d9:56:ca:0f:dc:46:2e:18:3e:84:32:87:f9:20:26:1d:
c9:4f:d8:ef:dc:89:7f:a2:01:8c:bd:b0:6e:03:ed:b4:89:c4:
74:44:1f:77:26:25:df:90:f4:48:6d:86:d2:4a:0d:b4:5e:16:
7c:d3:e1:cf:75:d2:37:ff:5b:7f:2d:6d:c9:d4:a0:bc:d0:7c:
37:5c:dc:d4:2e:5e:a4:c8:c2:7e:9f:54:a3:ba:ff:e5:ed:ce:
3e:49