LinkBack Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #2  
Old 03-Jun-2009, 10:53 AM
Junior Member
 
Join Date: May 2009
Location: Montreal (Quebec)
Posts: 6
ericp_gardeplus_ca 0 reputation points
Default Re: Novell remote Manager vs. LDAPS

Found that the namconfig -k did the certificate download. But now I am stuck with an "nss_ldap - DSA is unavailable" problem...

Novell Remote Manager only works with local users. I saw multiple threads regarding this issue but none seems to help me for now.

My LUM setup is working perfectly for all those services...
1) Local access to console (working)
2) iManager login (working)
3) iMonitor login (working)
4) SSHd login (working)
5) Local LDAP browse from Yast (working)

The "namconfig get" show proper information..
The "namconfig -k" download the certificate successfully.
The id admin show proper user information.
The /etc/pam.d/httpstkd config includes the pam_nam.so library.
The /etc/opt/novell/httpstkd.conf has the libnrm/libnrm2ncp libraries.
The iptables firewall on the LDAP server shows ACCEPTED request on port 636.

I also tried the following...

namconfig cache_refresh.
uninstall the novell-nrm and re-install it.
If I put a bad password on an LDAP user, I can see a message in the /var/log/messages stating that the ldap_compare failed with crypted password. PAM_NAM : NDS Login failed.

Where should I look now for more info/hints ?

Is it a problem with namcd or with httpstkd ?




Originally Posted by ericp_gardeplus_ca View Post
Hi,

Does Novell Remote Manager support LDAPS (self signed certificate).

My LUM/iManager setup is working fine, but I can't login to nrm using any LDAPS users. The httpstkd daemon crashes each time with an SSL error like the following.

httpstkd[2638]: pam_ldap: ldap_set_option(LDAP_OPT_X_TLS_REQUIRE_CERT): unknown error
httpstkd[2638]: _set_ssl_default_options failed

Is there a way to add Self_signed_certificate inside an httpstkd keystore ?

How to debut the ldap(s) portion or the httpstkd daemon ?

Thanks for your time...

Eric
Reply With Quote
 

Tags
httpstkd, ldaps, nrm, self signed

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -6. The time now is 08:10 AM.


© 2007 Novell, Inc. All Rights Reserved.

Search Engine Friendly URLs by vBSEO 3.3.0 RC2