Server is SLES 9 OES with SP1. Installed into tree OK. Created iPrint
Driver Store & Print Manager. Added drivers to the Driver Store. Later
(couple of weeks) tried to create printer & got IPP error 0xF0191
Authorization Required. The Driver Store and Print Manager are both "down",
and I get the same error when I try to start them.

I have put Apache into debug mode, and found this line in the error log:

[warn] [client] [23125] auth_ldapdn authenticate: user RicahrW
authentication failed; URI /idss [LDAP: ldap_simple_bind_s() failed] [Can't
contact LDAP server]

Running ldapsearch -x -h prints the directory to the screen; very
interesting to watch.

Running ldapsearch -h -p 636 at the command line gives this:

ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

indicating that a secure bind to the directory fails (I think). I thought
that there may be something amiss with the certificates, PKI, etc. PKI and
LDAP test out OK, though.

I have performed the remedies in the following TIDs:

10098616 (which resulted from an SR I opened last August) For this one, I
exported the Trusted Root Certificate as Base64, since the
/etc/opt/novell/iprint/httpd/conf/iprint_g.conf has these lines:

<IFModule mod_auth_ldapn.c>
LDAPTrustedCA /etc/opt/novell/SSCert.pem
LDAPTrustedCAType Base64_FILE

I named the exported file SSCert.pem an put in in /etc/opt/novell, then
restarted Apache. I had earlier exported the certificate as a DER file
renamed it and put it into /etc/opt/novell, but iManager would not load
until I discovered the third line in the section above and used Base64.

10066259 ("How to Test LDAP over SSL") This works fine as long as I export
the certificate as a DER file, but fails with I export the certificate as a
Base64 file. Perhaps this method won't work with Base64 certificate files,

So I'm back nearly where I was six weeks ago. I'd like to avoid opening
another SR if I can. It really looks like LDAP is working but something is
amiss with certificates. Unfortunately, I am at the limit of my knowledge
and experience and have done all the troubleshooting I know how.

Richard White CNE6
Mason County, Washington