[LDAP-interop] Net::LDAPS -> Active Directory

[Jeff Saxton]

1) installed M$ certificate services on AD server
2) copied cert to my Linux box
3) verified cert with openssl x509 -inform DER -in file.crt -noout -text
    cert looks OK
4) verified AD server listening on 636

5) run this perl script
---- adtesst.pl ----
#!/usr/bin/perl
use Net::LDAPS;

$ldap = Net::LDAP->new(
         'ldaps://adserver.mydomain.com:636',
         timeout => 1000,
         verify => 'require',
         capath => '/root/AD/',
         ) || die "cant make initial connection: $@";

$result - $ldap->bind(
         'cn=myuser,dc=mydomain,dc=com',
         password => 'my_passwd',
         ) || die $!;

$ldap->unbind();
exit;
---- cut here ----

[jsaxton at localhost AD]$ time ./adteswt.pl
cant make initial connection: IO::Socket::SSL: Timeout at ./a.pl line 11, <DATA> line 225.

real    0m0.602s
user    0m0.441s
sys     0m0.032s
[jsaxton at localhost AD]$

So it looks like the timeout is being ignored??


_______________________________________________
LDAP-interop mailing list
LDAP-interop at fini.net
http://lists.fini.net/mailman/listinfo/ldap-interop