rendered paste body[root@low-mgt-101 fedora-ds]# ldapsearch -x -d -1 -ZZ
ldap_create
ldap_extended_operation_s
ldap_extended_operation
ldap_send_initial_request
ldap_new_connection
ldap_int_open_connection
ldap_connect_to_host: TCP low-mgt-101.pii-dmz.ext:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 192.168.225.240:389
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_ndelay_on: 3
ldap_is_sock_ready: 3
ldap_ndelay_off: 3
ldap_open_defconn: successful
ldap_send_server_request
ber_flush: 31 bytes to sd 3
0000: 30 1d 02 01 01 77 18 80 16 31 2e 33 2e 36 2e 31 0....w...1.3.6.1
0010: 2e 34 2e 31 2e 31 34 36 36 2e 32 30 30 33 37 .4.1.1466.20037
ldap_write: want=31, written=31
0000: 30 1d 02 01 01 77 18 80 16 31 2e 33 2e 36 2e 31 0....w...1.3.6.1
0010: 2e 34 2e 31 2e 31 34 36 36 2e 32 30 30 33 37 .4.1.1466.20037
ldap_result msgid 1
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
wait4msg (infinite timeout), msgid 1
wait4msg continue, msgid 1, all 1
** Connections:
* host: low-mgt-101.pii-dmz.ext port: 389 (default)
refcnt: 2 status: Connected
last used: Wed Nov 1 13:18:18 2006
** Outstanding Requests:
* msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
** Response Queue:
Empty
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
ldap_int_select
read1msg: msgid 1, all 1
ber_get_next
ldap_read: want=8, got=8
0000: 30 5f 02 01 01 78 5a 0a 0_...xZ.
ldap_read: want=89, got=89
0000: 01 00 04 00 04 3b 53 74 61 72 74 20 54 4c 53 20 .....;Start TLS
0010: 72 65 71 75 65 73 74 20 61 63 63 65 70 74 65 64 request accepted
0020: 2e 53 65 72 76 65 72 20 77 69 6c 6c 69 6e 67 20 .Server willing
0030: 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 53 53 4c to negotiate SSL
0040: 2e 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 31 ...1.3.6.1.4.1.1
0050: 34 36 36 2e 32 30 30 33 37 466.20037
ber_get_next: tag 0x30 len 95 contents:
ber_dump: buf=0x083023e0 ptr=0x083023e0 end=0x0830243f len=95
0000: 02 01 01 78 5a 0a 01 00 04 00 04 3b 53 74 61 72 ...xZ......;Star
0010: 74 20 54 4c 53 20 72 65 71 75 65 73 74 20 61 63 t TLS request ac
0020: 63 65 70 74 65 64 2e 53 65 72 76 65 72 20 77 69 cepted.Server wi
0030: 6c 6c 69 6e 67 20 74 6f 20 6e 65 67 6f 74 69 61 lling to negotia
0040: 74 65 20 53 53 4c 2e 8a 16 31 2e 33 2e 36 2e 31 te SSL...1.3.6.1
0050: 2e 34 2e 31 2e 31 34 36 36 2e 32 30 30 33 37 .4.1.1466.20037
ldap_read: message type extended-result msgid 1, original id 1
ber_scanf fmt ({iaa) ber:
ber_dump: buf=0x083023e0 ptr=0x083023e3 end=0x0830243f len=92
0000: 78 5a 0a 01 00 04 00 04 3b 53 74 61 72 74 20 54 xZ......;Start T
0010: 4c 53 20 72 65 71 75 65 73 74 20 61 63 63 65 70 LS request accep
0020: 74 65 64 2e 53 65 72 76 65 72 20 77 69 6c 6c 69 ted.Server willi
0030: 6e 67 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 ng to negotiate
0040: 53 53 4c 2e 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e SSL...1.3.6.1.4.
0050: 31 2e 31 34 36 36 2e 32 30 30 33 37 1.1466.20037
read1msg: 0 new referrals
read1msg: mark request completed, id = 1
request 1 done
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 1, msgid 1)
ldap_free_connection
ldap_free_connection: refcnt 1
ldap_parse_extended_result
ber_scanf fmt ({iaa) ber:
ber_dump: buf=0x083023e0 ptr=0x083023e3 end=0x0830243f len=92
0000: 78 5a 0a 01 00 04 00 04 3b 53 74 61 72 74 20 54 xZ......;Start T
0010: 4c 53 20 72 65 71 75 65 73 74 20 61 63 63 65 70 LS request accep
0020: 74 65 64 2e 53 65 72 76 65 72 20 77 69 6c 6c 69 ted.Server willi
0030: 6e 67 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 ng to negotiate
0040: 53 53 4c 2e 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e SSL...1.3.6.1.4.
0050: 31 2e 31 34 36 36 2e 32 30 30 33 37 1.1466.20037
ber_scanf fmt (a) ber:
ber_dump: buf=0x083023e0 ptr=0x08302427 end=0x0830243f len=24
0000: 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 31 34 ..1.3.6.1.4.1.14
0010: 36 36 2e 32 30 30 33 37 66.20037
ldap_parse_result
ber_scanf fmt ({iaa) ber:
ber_dump: buf=0x083023e0 ptr=0x083023e3 end=0x0830243f len=92
0000: 78 5a 0a 01 00 04 00 04 3b 53 74 61 72 74 20 54 xZ......;Start T
0010: 4c 53 20 72 65 71 75 65 73 74 20 61 63 63 65 70 LS request accep
0020: 74 65 64 2e 53 65 72 76 65 72 20 77 69 6c 6c 69 ted.Server willi
0030: 6e 67 20 74 6f 20 6e 65 67 6f 74 69 61 74 65 20 ng to negotiate
0040: 53 53 4c 2e 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e SSL...1.3.6.1.4.
0050: 31 2e 31 34 36 36 2e 32 30 30 33 37 1.1466.20037
ber_scanf fmt (x) ber:
ber_dump: buf=0x083023e0 ptr=0x08302427 end=0x0830243f len=24
0000: 8a 16 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 31 34 ..1.3.6.1.4.1.14
0010: 36 36 2e 32 30 30 33 37 66.20037
ber_scanf fmt (}) ber:
ber_dump: buf=0x083023e0 ptr=0x0830243f end=0x0830243f len=0
ldap_msgfree
TLS trace: SSL_connect:before/connect initialization
tls_write: want=142, written=142
0000: 80 8c 01 03 01 00 63 00 00 00 20 00 00 39 00 00 ......c... ..9..
0010: 38 00 00 35 00 00 16 00 00 13 00 00 0a 07 00 c0 8..5............
0020: 00 00 33 00 00 32 00 00 2f 03 00 80 00 00 66 00 ..3..2../.....f.
0030: 00 05 00 00 04 01 00 80 08 00 80 00 00 63 00 00 .............c..
0040: 62 00 00 61 00 00 15 00 00 12 00 00 09 06 00 40 b..a...........@
0050: 00 00 65 00 00 64 00 00 60 00 00 14 00 00 11 00 ..e..d..`.......
0060: 00 08 00 00 06 04 00 80 00 00 03 02 00 80 10 03 ................
0070: 0f 2a 65 4c a7 d1 eb 11 cb 88 81 57 5d 8a 23 45 .*eL.......W].#E
0080: 68 68 79 4a cd 2a 8e 86 4b 96 75 6c e7 36 hhyJ.*..K.ul.6
TLS trace: SSL_connect:SSLv2/v3 write client hello A
tls_read: want=7, got=0
TLS: can't connect.
ldap_perror
ldap_start_tls: Connect error (-11)
additional info: Start TLS request accepted.Server willing to negotiate SSL.