Nagios Support Forum

scottwilkerson wrote:I was suggesting

Code: Select all

check_ldap --starttls

--starttls or -T does not work for our connection to the ldap servers we alrady tried it

Are you sure it used --ssl and not --starttls ? -T [--starttls] use starttls mechanism introduced in protocol version 3 -S [--ssl] use ldaps (ldap v2 ssl method). this also sets the default port to 636 Yes, we tried 3 different settings check_ldaps with -S check_ldap --ssl check_ldap -S

Hi Scott,
the -v parameter shows me the same result "Could not bind to the LDAP server"...
It seems that when calling the command by nrpe_check it is ignoring the -S on the remote check_ldap command, maybe?

We are running everything using the scd user ... not root Note: On the same nrpe.cfg file we have several ldap checks running with the same user and settings, the only diference is that some ldap checks use ----ssl parameter. Ex: 1st command[check_ldap6]=/home/scd/Basis_Nagios/plugins/check_ldap -H ...

Hi Scott, that was a typo, we are running the command using the -3 both on remote server as on the Nagios service: We are always using the following command / nrpe configuration /home/scd/Basis_Nagios/plugins/check_ldap -H 'xxxxxxxxxxxxxxx' -b '' --port=9007 -D 'cn=xxxx,cn=xxx' -P 'xxxxxxxxxxxxx' -3...

Ok, can it run as scd? su scd /home/scd/Basis_Nagios/plugins/check_ldap -H 'xxxxxxx' -b '' --port=9007 -D 'cn=moni,cn=Acc' -P 'xxxxxxxxxx' -2 --ssl Hi Scott, we have 2 scenarios on this server: - Connection to a ldap (without ssl) works fine - Connection to a ldaps server with ssl does not Running ...

-- Deleted --

-- Deleted --