search for: smb_ldap_start_tls

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Does anyone know what this error means: [root@ldap2 samba]# net getlocalsid [2009/07/07 17:04:00, 0] lib/smbldap.c:smb_ldap_start_tls(600) Failed to issue the StartTLS instruction: Protocol error [2009/07/07 17:04:01, 0] lib/smbldap.c:smb_ldap_start_tls(600) Failed to issue the StartTLS instruction: Protocol error [2009/07/07 17:04:02, 0] lib/smbldap.c:smb_ldap_start_tls(600) Failed to issue the StartTLS instruction: Protocol err...

...ng errors in my logs. Using SSL: Jul 13 09:52:34 prism smbd[23161]: smbldap_search_suffix: Problem during the LDAP search: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure (Time limit exceeded) Jul 13 09:52:34 prism smbd[23161]: [2006/07/13 09:52:34, 0] lib/smbldap.c:smb_ldap_start_tls(546) Jul 13 09:52:34 prism smbd[23161]: Failed to issue the StartTLS instruction: Can't contact LDAP server Using TLS Jul 18 10:32:09 prism smbd[7441]: [2006/07/18 10:32:09, 0] lib/smbldap.c:smb_ldap_start_tls(612) Jul 18 10:32:09 prism smbd[7441]: Failed to issue the StartTLS instruct...

...- - lots of lines cut - - -> Nov 10 11:31:22 hh1 slapd[1727]: conn=1243 op=3 BIND dn="uid=lynn2,ou=people,dc=site" method=128 The windows clients can login but are denied access to their home folder: Nov 10 11:20:16 hh1 smbd[6066]: [2011/11/10 11:20:16.268556, 0] lib/smbldap.c:731(smb_ldap_start_tls) Nov 10 11:20:16 hh1 smbd[6066]: Failed to issue the StartTLS instruction: Connect error If smb.conf contains the line: ldap ssl = start tls windows clients can login, but are denied access to their home folders. Uncommenting this line and resarting smb allows windows clients both to login...

On Wed, Jan 6, 2016 at 10:36 AM, Graham Allan <allan at physics.umn.edu> wrote: > On 01/06/2016 09:53 AM, Graham Allan wrote: > >> >> The packet dump is a good idea. I get the same failure using straight >> SSL to port 636, but wireshark might be able to decode any StartTLS >> negotiation attempt on the default port. Failing that I guess I'll >>

...HOST 127.0.0.1 BASE dc=<domainname>,dc=org or net or com or nothing(you do not have to use the last part, you just have to be consistant) This is where I come to my next problem, I cannot get the localsid. When I ask for it (net getlocalsid) I get this [2006/02/19 11:19:58, 0] lib/smbldap.c:smb_ldap_start_tls(546) Failed to issue the StartTLS instruction: Connect error I have googled, found a few instances of this with earlier versions of samba, so upgraded to 3.0.21b-1 from debian testing, it still gives same answer, anybody have an answer please.

...e: passdb backend = ldapsam:ldaps://<company_ldap_server>/ ldap ssl = start tls ldap suffix = dc=xxx,dc=yyy,dc=zzz ldap delete dn = no ldap user suffix = ou=People ldap group suffix = ou=Groups Here is the error I am seeing in the Samba errorlog: [2013/05/16 11:08:14, 0] lib/smbldap.c:656(smb_ldap_start_tls) Failed to issue the StartTLS instruction: Can't contact LDAP server [2013/05/16 11:08:14, 1] lib/smbldap.c:1231(another_ldap_try) Connection to LDAP server failed for the 1 try! Is there a documented procedure on how to connect samba users to a backend ldap server? Any help with is grea...

...hers I've had to point to a directory of certs. gdb didn't give me much new, though for the record, it needed a couple of things to be usable: (1) install newer gdb from ports, and (2) build samba with --disable-pie What I got from that was ldap_start_tls_s (ldap_struct, NULL, NULL) in smb_ldap_start_tls is returning -11 (LDAP_CONNECT_ERROR), which doesn't really help. Maximum debugging on the ldap server gave me: connection_read(3): TLS accept failure error=-1 id=1042, closing conn=1042 fd=3 closed (TLS negotiation failure) I'm out of ideas for now, other than maybe trying one of the op...

Hi I have Samba 3.4.0 and slapd 2.4.15 . In my samba log appears this lines again and again: [2009/09/09 01:53:31, 0] lib/smbldap.c:smb_ldap_start_tls(600) Failed to issue the StartTLS instruction: Protocol error [2009/09/09 01:53:31, 1] lib/smbldap.c:another_ldap_try(1175) Connection to LDAP server failed for the 1 try! this means he cant connect to the LDAP Server because he want uses ssl, or? but i dont use ssl. I disabled it in openlda...

...Samba setup as an member server in an Active Directory Domain and operating as a File Server with SSO. I've been getting lots of these errors in the messages file. I also get a similar message in bash with ldapsearch -ZZ Feb 20 00:19:32 linux-hh3x net: [2010/02/20 00:19:32, 0] lib/smbldap.c:smb_ldap_start_tls(596) Feb 20 00:19:32 linux-hh3x net: Failed to issue the StartTLS instruction: Decoding error My configuration is: OpenSUSE 11.1 Samba 3.2.7 Windows Server 2000 sp4 The Linux box shows up in the Active Director Computers and in the Windows Server Manager. And in Network Places shows the Samba...

...ry of certs. >> > > gdb didn't give me much new, though for the record, it needed a couple of > things to be usable: (1) install newer gdb from ports, and (2) build samba > with --disable-pie > > What I got from that was ldap_start_tls_s (ldap_struct, NULL, NULL) in > smb_ldap_start_tls is returning -11 (LDAP_CONNECT_ERROR), which doesn't > really help. > > Maximum debugging on the ldap server gave me: > connection_read(3): TLS accept failure error=-1 id=1042, closing > conn=1042 fd=3 closed (TLS negotiation failure) > > I'm out of ideas for now, other...

...on [2009/09/17 14:39:23, 3] smbd/server.c:1122(main) Becoming a daemon. [2009/09/17 14:39:23, 2] lib/smbldap_util.c:277(smbldap_search_domain_info) smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=FH_STP))] [2009/09/17 14:39:23, 3] lib/smbldap.c:660(smb_ldap_start_tls) StartTLS issued: using a TLS connection [2009/09/17 14:39:23, 2] lib/smbldap.c:856(smbldap_open_connection) smbldap_open_connection: connection opened [2009/09/17 14:39:23, 3] lib/smbldap.c:1067(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP server ...........

...word: Checking password for unmapped user [Sharename]\[username]@[Server] with the new password interface [2015/04/18 13:41:26.262024, 3] auth/auth.c:222(check_ntlm_password) check_ntlm_password: mapped user is: [Sharename]\[username]@[Server] [2015/04/18 13:41:26.275787, 3] lib/smbldap.c:803(smb_ldap_start_tls) StartTLS issued: using a TLS connection [2015/04/18 13:41:26.275830, 2] lib/smbldap.c:1018(smbldap_open_connection) smbldap_open_connection: connection opened [2015/04/18 13:41:26.277053, 3] lib/smbldap.c:1240(smbldap_connect_system) ldap_connect_system: successful connection to the LDAP s...

...ord for unmapped user > [Sharename]\[username]@[Server] with the new password interface > [2015/04/18 13:41:26.262024, 3] auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: [Sharename]\[username]@[Server] > [2015/04/18 13:41:26.275787, 3] lib/smbldap.c:803(smb_ldap_start_tls) > StartTLS issued: using a TLS connection > [2015/04/18 13:41:26.275830, 2] lib/smbldap.c:1018(smbldap_open_connection) > smbldap_open_connection: connection opened > [2015/04/18 13:41:26.277053, 3] lib/smbldap.c:1240(smbldap_connect_system) > ldap_connect_system: success...

Hey Samba list, First a brief comment regarding my background and situation. This is my first time posting to this list. I've been asked to resolve a Samba authentication issue, but I have next to no experience using Samba. Unfortunately no one else here knows how to use it either; we're operating with an inherited environment from a sysadmin who left minimal documentation, and we have

...user >> [Sharename]\[username]@[Server] with the new password interface >> [2015/04/18 13:41:26.262024, 3] auth/auth.c:222(check_ntlm_password) >> check_ntlm_password: mapped user is: [Sharename]\[username]@[Server] >> [2015/04/18 13:41:26.275787, 3] lib/smbldap.c:803(smb_ldap_start_tls) >> StartTLS issued: using a TLS connection >> [2015/04/18 13:41:26.275830, 2] >> lib/smbldap.c:1018(smbldap_open_connection) >> smbldap_open_connection: connection opened >> [2015/04/18 13:41:26.277053, 3] >> lib/smbldap.c:1240(smbldap_connect_system) &g...

...the new password interface > [2015/04/18 13:41:26.262024, 3] > auth/auth.c:222(check_ntlm_password) > check_ntlm_password: mapped user is: > [Sharename]\[username]@[Server] > [2015/04/18 13:41:26.275787, 3] > lib/smbldap.c:803(smb_ldap_start_tls) > StartTLS issued: using a TLS connection > [2015/04/18 13:41:26.275830, 2] > lib/smbldap.c:1018(smbldap_open_connection) > smbldap_open_connection: connection opened > [2015/04/18 13:41:26.277053, 3] > lib/smbldap.c:1240(sm...

..._sec_ctx(208) push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1 [2008/10/23 17:21:42, 3] smbd/uid.c:push_conn_ctx(353) push_conn_ctx(0) : conn_ctx_stack_ndx = 0 [2008/10/23 17:21:42, 3] smbd/sec_ctx.c:set_sec_ctx(241) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1 [2008/10/23 17:21:43, 3] lib/smbldap.c:smb_ldap_start_tls(616) StartTLS issued: using a TLS connection [2008/10/23 17:21:43, 2] lib/smbldap.c:smbldap_open_connection(788) smbldap_open_connection: connection opened [2008/10/23 17:21:43, 3] lib/smbldap.c:smbldap_connect_system(992) ldap_connect_system: succesful connection to the LDAP server [2008/10/23...