[Samba] Samba StartTLS
steve at steve-ss.com
Fri Nov 11 00:31:28 MST 2011
Lan with opensuse 11.4 Samba and LDAP server. Linux, win-xp and win7 clients.
The Linux clients can login fine under TLS:
Nov 10 11:31:22 hh1 slapd: conn=1243 op=0 STARTTLS
Nov 10 11:31:22 hh1 slapd: conn=1243 op=0 RESULT oid= err=0 text=
Nov 10 11:31:22 hh1 slapd: conn=1243 fd=23 TLS established tls_ssf=256
Nov 10 11:31:22 hh1 slapd: conn=1243 op=1 BIND dn="" method=128
<- - - lots of lines cut - - ->
Nov 10 11:31:22 hh1 slapd: conn=1243 op=3 BIND
The windows clients can login but are denied access to their home folder:
Nov 10 11:20:16 hh1 smbd: [2011/11/10 11:20:16.268556, 0]
Nov 10 11:20:16 hh1 smbd: Failed to issue the StartTLS instruction:
If smb.conf contains the line:
ldap ssl = start tls
windows clients can login, but are denied access to their
home folders. Uncommenting this line and resarting smb allows windows clients
both to login and gain access to their home folder.
Summary: Samba without TLS works. Samba with TLS doesn't.
Can I confirm:
1. That LDAP is working.
2. That the CA and server certificates (signed by the CA) are correct.
3. The problem is with smb.conf
and lastly after much googling and reading, can anyone help me get rid of the
samba tls issue?
More information about the samba