rendered paste bodyrosa:/etc/ldap# cat ~/.ldaprc
SASL_MECH EXTERNAL
TLS_CERT /etc/ldap/server-cert.pem
TLS_KEY /etc/ldap/server-key.pem
rosa:/etc/ldap# openssl x509 -text -in /etc/ldap/server-cert.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
9e:a2:10:a2:26:11:f7:4b
Signature Algorithm: sha1WithRSAEncryption
Issuer: CN=rosa.kuiki.net
Validity
Not Before: Dec 31 12:20:23 2006 GMT
Not After : Dec 28 12:20:23 2016 GMT
Subject: CN=rosa.kuiki.net
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:c8:4f:0c:b7:64:f4:56:60:46:28:90:3e:2f:de:
3e:c0:c2:b0:11:c1:3a:06:06:33:af:ca:c5:ca:9a:
e6:01:54:78:5d:3f:c9:bb:06:f3:a5:15:d3:c8:27:
2a:9d:8c:0e:5b:28:8e:3d:1f:d9:70:23:62:37:d6:
0d:af:6b:a3:22:75:9e:fd:60:3f:a8:53:c1:eb:27:
e0:33:13:e8:83:a5:94:bf:82:45:82:a0:8d:9b:5c:
d6:e4:f5:74:64:b5:e0:b9:00:35:a7:0b:21:8e:e0:
05:ca:03:72:f0:23:94:37:f6:6e:43:43:32:73:6d:
d0:34:8b:5b:99:42:38:3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:CF:BA:5D:61:9C:71:13:24:BF:C5:14:94:AD:31:B4:46:15:47
X509v3 Authority Key Identifier:
keyid:A9:65:CF:BA:5D:61:9C:71:13:24:BF:C5:14:94:AD:31:B4:46:15:47
DirName:/CN=rosa.kuiki.net
serial:9E:A2:10:A2:26:11:F7:4B
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
13:b0:2b:5c:af:56:84:c0:fd:be:98:7c:73:f9:b8:84:82:b6:
6b:9a:42:ac:b4:1b:0b:17:26:30:07:ba:9b:47:4c:3a:ea:ac:
f1:c2:ab:20:ec:54:cf:1e:35:89:f7:4a:a9:83:9f:d4:a4:37:
5a:0b:65:99:34:c1:69:d3:85:fb:f0:c6:32:23:16:64:cc:5c:
ab:57:af:22:7a:a9:10:86:00:c8:ca:af:3d:8c:9e:09:f4:0a:
3d:d2:18:f2:db:be:4f:67:6e:03:35:1b:29:58:8d:b7:a7:35:
e4:6a:11:af:db:0e:de:d4:63:b4:b5:05:2d:86:ce:bb:f8:33:
2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
rosa:/etc/ldap# ldapwhoami -vv -d -1 -H ldaps://shego.kuiki.net/
ldap_url_parse_ext(ldaps://shego.kuiki.net/)
ldap_initialize( ldaps://shego.kuiki.net:636/??base )
ldap_create
ldap_url_parse_ext(ldaps://shego.kuiki.net:636/??base)
ldap_sasl_interactive_bind_s: user selected: EXTERNAL
ldap_int_sasl_bind: EXTERNAL
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP shego.kuiki.net:636
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 207.7.148.208:636
ldap_pvt_connect: fd: 3 tm: -1 async: 0
tls_write: want=82, written=82
0000: 16 03 02 00 4d 01 00 00 49 03 02 47 9e ff 6e 29 ....M...I..G..n)
0010: 4f f1 88 42 08 2e 0e 7d 65 09 19 74 36 23 c6 5c O..B...}e..t6#.\
0020: 5d 99 15 b2 dd 49 72 f4 88 89 98 00 00 18 00 39 ]....Ir........9
0030: 00 33 00 16 00 38 00 32 00 13 00 66 00 35 00 2f .3...8.2...f.5./
0040: 00 0a 00 05 00 04 02 01 00 00 07 00 09 00 03 02 ................
0050: 00 01 ..
tls_read: want=5, got=5
0000: 16 03 01 00 4a ....J
tls_read: want=74, got=74
0000: 02 00 00 46 03 01 47 9e ff 85 6a 34 33 a6 69 8c ...F..G...j43.i.
0010: b2 ca 82 f9 0a 9b ba 07 72 fe 5e b1 97 95 b9 77 ........r.^....w
0020: 33 76 8a 0d 24 80 20 c7 fb 95 dd dc 8e 8d f5 78 3v..$. ........x
0030: 18 d3 21 aa 42 fb 8c a7 f6 f8 42 56 bf 6f b4 70 ..!.B.....BV.o.p
0040: 91 8c 7c 6c 16 24 ec 00 35 01 ..|l.$..5.
tls_read: want=5, got=5
0000: 16 03 01 02 3b ....;
tls_read: want=571, got=571
0000: 0b 00 02 37 00 02 34 00 02 31 30 82 02 2d 30 82 ...7..4..10..-0.
0010: 01 96 a0 03 02 01 02 02 09 00 a0 1e 16 dc 71 a8 ..............q.
0020: a1 25 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 .%0...*.H.......
0030: 00 30 1a 31 18 30 16 06 03 55 04 03 13 0f 73 68 .0.1.0...U....sh
0040: 65 67 6f 2e 6b 75 69 6b 69 2e 6e 65 74 30 1e 17 ego.kuiki.net0..
0050: 0d 30 37 30 31 30 31 30 32 32 38 34 36 5a 17 0d .070101022846Z..
0060: 31 36 31 32 32 39 30 32 32 38 34 36 5a 30 1a 31 161229022846Z0.1
0070: 18 30 16 06 03 55 04 03 13 0f 73 68 65 67 6f 2e .0...U....shego.
0080: 6b 75 69 6b 69 2e 6e 65 74 30 81 9f 30 0d 06 09 kuiki.net0..0...
0090: 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 *.H............0
00a0: 81 89 02 81 81 00 dc 3a 62 dd 7a ed ea a6 4d ce .......:b.z...M.
00b0: 96 a3 a4 33 f8 80 08 06 cf cc 49 7c c9 a7 a3 d0 ...3......I|....
00c0: 37 f3 10 75 6b 57 f8 03 11 51 91 bd 69 d1 6f c0 7..ukW...Q..i.o.
00d0: 0b 46 bc 56 d1 e3 f9 a5 3e 12 f2 93 68 99 b1 c7 .F.V....>...h...
00e0: 8d 1c 46 8f 81 9a f7 fa 19 3e cd 76 51 6b 12 7b ..F......>.vQk.{
00f0: 6a e3 dc 0f 5f 69 e2 cb a5 bc 03 63 30 31 b7 67 j..._i.....c01.g
0100: bf f6 c4 1b fe f4 2d 67 fc 58 da b7 bc df 00 86 ......-g.X......
0110: 20 89 66 82 79 92 16 1e d3 4a f5 94 82 05 b6 1a .f.y....J......
0120: e9 e7 6b 54 c4 79 02 03 01 00 01 a3 7b 30 79 30 ..kT.y......{0y0
0130: 1d 06 03 55 1d 0e 04 16 04 14 5f 4d 6f f6 f9 c8 ...U......_Mo...
0140: 80 a8 4c 9e c6 88 1e 1d 6b 3f a2 e7 7a b2 30 4a ..L.....k?..z.0J
0150: 06 03 55 1d 23 04 43 30 41 80 14 5f 4d 6f f6 f9 ..U.#.C0A.._Mo..
0160: c8 80 a8 4c 9e c6 88 1e 1d 6b 3f a2 e7 7a b2 a1 ...L.....k?..z..
0170: 1e a4 1c 30 1a 31 18 30 16 06 03 55 04 03 13 0f ...0.1.0...U....
0180: 73 68 65 67 6f 2e 6b 75 69 6b 69 2e 6e 65 74 82 shego.kuiki.net.
0190: 09 00 a0 1e 16 dc 71 a8 a1 25 30 0c 06 03 55 1d ......q..%0...U.
01a0: 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 ...0....0...*.H.
01b0: f7 0d 01 01 05 05 00 03 81 81 00 4b 33 ef 9e b3 ...........K3...
01c0: cd b4 cc 33 8e 75 80 70 8e 3b 85 3a 96 9c 56 ff ...3.u.p.;.:..V.
01d0: d9 0d a9 22 0d 15 d8 f7 4a bf 1b b2 34 a7 dd f9 ..."....J...4...
01e0: c5 e8 c6 c7 3e 5e a4 b2 3b 1e c1 73 25 ef 6c 86 ....>^..;..s%.l.
01f0: 0c 2b 54 68 98 d9 bd 60 fc 3a b5 49 1f 85 bf be .+Th...`.:.I....
0200: 32 7b eb 7c a7 9b 9d 22 19 8a 06 aa 09 39 c1 63 2{.|...".....9.c
0210: 71 6f 87 82 ad 01 73 ee 7d 6d 67 20 1e 9a 37 f4 qo....s.}mg ..7.
0220: c8 05 96 59 06 6b 22 73 ff e4 c0 33 c1 27 62 83 ...Y.k"s...3.'b.
0230: b8 f2 d9 3e 6c 79 8b 0a 75 8d 00 ...>ly..u..
tls_read: want=5, got=5
0000: 16 03 01 00 4b ....K
tls_read: want=75, got=75
0000: 0d 00 00 43 03 01 02 40 00 3d 00 1b 30 19 31 17 ...C...@.=..0.1.
0010: 30 15 06 03 55 04 03 13 0e 72 6f 73 61 2e 6b 75 0...U....rosa.ku
0020: 69 6b 69 2e 6e 65 74 00 1e 30 1c 31 1a 30 18 06 iki.net..0.1.0..
0030: 03 55 04 03 13 11 73 61 63 68 69 6b 6f 2e 6b 75 .U....sachiko.ku
0040: 69 6b 69 2e 6e 65 74 0e 00 00 00 iki.net....
tls_write: want=573, written=573
0000: 16 03 01 02 38 0b 00 02 34 00 02 31 00 02 2e 30 ....8...4..1...0
0010: 82 02 2a 30 82 01 93 a0 03 02 01 02 02 09 00 9e ..*0............
0020: a2 10 a2 26 11 f7 4b 30 0d 06 09 2a 86 48 86 f7 ...&..K0...*.H..
0030: 0d 01 01 05 05 00 30 19 31 17 30 15 06 03 55 04 ......0.1.0...U.
0040: 03 13 0e 72 6f 73 61 2e 6b 75 69 6b 69 2e 6e 65 ...rosa.kuiki.ne
0050: 74 30 1e 17 0d 30 36 31 32 33 31 31 32 32 30 32 t0...06123112202
0060: 33 5a 17 0d 31 36 31 32 32 38 31 32 32 30 32 33 3Z..161228122023
0070: 5a 30 19 31 17 30 15 06 03 55 04 03 13 0e 72 6f Z0.1.0...U....ro
0080: 73 61 2e 6b 75 69 6b 69 2e 6e 65 74 30 81 9f 30 sa.kuiki.net0..0
0090: 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 ...*.H..........
00a0: 8d 00 30 81 89 02 81 81 00 c8 4f 0c b7 64 f4 56 ..0.......O..d.V
00b0: 60 46 28 90 3e 2f de 3e c0 c2 b0 11 c1 3a 06 06 `F(.>/.>.....:..
00c0: 33 af ca c5 ca 9a e6 01 54 78 5d 3f c9 bb 06 f3 3.......Tx]?....
00d0: a5 15 d3 c8 27 2a 9d 8c 0e 5b 28 8e 3d 1f d9 70 ....'*...[(.=..p
00e0: 23 62 37 d6 0d af 6b a3 22 75 9e fd 60 3f a8 53 #b7...k."u..`?.S
00f0: c1 eb 27 e0 33 13 e8 83 a5 94 bf 82 45 82 a0 8d ..'.3.......E...
0100: 9b 5c d6 e4 f5 74 64 b5 e0 b9 00 35 a7 0b 21 8e .\...td....5..!.
0110: e0 05 ca 03 72 f0 23 94 37 f6 6e 43 43 32 73 6d ....r.#.7.nCC2sm
0120: d0 34 8b 5b 99 42 38 3d 9b 02 03 01 00 01 a3 7a .4.[.B8=.......z
0130: 30 78 30 1d 06 03 55 1d 0e 04 16 04 14 a9 65 cf 0x0...U.......e.
0140: ba 5d 61 9c 71 13 24 bf c5 14 94 ad 31 b4 46 15 .]a.q.$.....1.F.
0150: 47 30 49 06 03 55 1d 23 04 42 30 40 80 14 a9 65 G0I..U.#.B0@...e
0160: cf ba 5d 61 9c 71 13 24 bf c5 14 94 ad 31 b4 46 ..]a.q.$.....1.F
0170: 15 47 a1 1d a4 1b 30 19 31 17 30 15 06 03 55 04 .G....0.1.0...U.
0180: 03 13 0e 72 6f 73 61 2e 6b 75 69 6b 69 2e 6e 65 ...rosa.kuiki.ne
0190: 74 82 09 00 9e a2 10 a2 26 11 f7 4b 30 0c 06 03 t.......&..K0...
01a0: 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 U....0....0...*.
01b0: 48 86 f7 0d 01 01 05 05 00 03 81 81 00 13 b0 2b H..............+
01c0: 5c af 56 84 c0 fd be 98 7c 73 f9 b8 84 82 b6 6b \.V.....|s.....k
01d0: 9a 42 ac b4 1b 0b 17 26 30 07 ba 9b 47 4c 3a ea .B.....&0...GL:.
01e0: ac f1 c2 ab 20 ec 54 cf 1e 35 89 f7 4a a9 83 9f .... .T..5..J...
01f0: d4 a4 37 5a 0b 65 99 34 c1 69 d3 85 fb f0 c6 32 ..7Z.e.4.i.....2
0200: 23 16 64 cc 5c ab 57 af 22 7a a9 10 86 00 c8 ca #.d.\.W."z......
0210: af 3d 8c 9e 09 f4 0a 3d d2 18 f2 db be 4f 67 6e .=.....=.....Ogn
0220: 03 35 1b 29 58 8d b7 a7 35 e4 6a 11 af db 0e de .5.)X...5.j.....
0230: d4 63 b4 b5 05 2d 86 ce bb f8 33 2c b8 .c...-....3,.
tls_write: want=139, written=139
0000: 16 03 01 00 86 10 00 00 82 00 80 94 a3 c0 f5 22 ..............."
0010: b0 20 0b 6b 8e 43 d8 1c d9 24 c1 dd 70 ef 6f 84 . .k.C...$..p.o.
0020: 77 cf 1a 43 48 01 b7 c8 c5 7d 91 5e c0 75 11 30 w..CH....}.^.u.0
0030: fd 91 81 b4 73 06 ac 62 4b ec 6c e3 c0 c9 9f f6 ....s..bK.l.....
0040: 99 db 79 3d b8 bb 86 f1 e5 9b 30 7c 70 00 10 e6 ..y=......0|p...
0050: 50 f5 9b d3 ca aa 9f 39 9b f2 66 f7 ac 62 28 74 P......9..f..b(t
0060: 5c 46 56 23 8e 9d f4 11 9d 62 8c 40 8c 78 2b 87 \FV#.....b.@.x+.
0070: f6 af 1a e6 7a 18 50 cb 33 77 1a 3b d0 57 8a 99 ....z.P.3w.;.W..
0080: 05 bc 4e a4 cd a2 cf 78 08 cd e9 ..N....x...
tls_write: want=139, written=139
0000: 16 03 01 00 86 0f 00 00 82 00 80 90 1b 7b ac 0c .............{..
0010: 15 bc e3 67 bd 21 82 0c 01 90 27 61 0c f8 d3 03 ...g.!....'a....
0020: 47 f9 4b e3 60 20 46 4a db 37 84 0a 09 4c e5 44 G.K.` FJ.7...L.D
0030: e5 b0 37 af a5 7e ff dd 49 6b 95 ad b1 f9 fa d9 ..7..~..Ik......
0040: a4 2d 08 b8 0a d5 eb 38 14 7d 4d ca b7 ad 56 6b .-.....8.}M...Vk
0050: 66 d1 37 09 cc 71 a8 b1 c3 00 2d da 59 4e ac 83 f.7..q....-.YN..
0060: 0b 77 55 44 9d 4f e3 5b 55 79 3c 1d e0 8c 68 8d .wUD.O.[Uy<...h.
0070: ad fc 1a ac 8f 89 71 83 cf 1a ec 7d 80 c4 a8 73 ......q....}...s
0080: 4b 32 12 4a f0 6b 1b 73 6c 73 11 K2.J.k.sls.
tls_write: want=6, written=6
0000: 14 03 01 00 01 01 ......
tls_write: want=261, written=261
0000: 16 03 01 01 00 76 55 17 a1 e4 65 c4 46 53 1b e2 .....vU...e.FS..
0010: 2a 12 ca ec 83 64 93 ef 87 c1 a0 e7 89 57 c6 e1 *....d.......W..
0020: ee 00 06 b2 2b 00 2a 35 e3 dc 3f 98 53 82 ab 87 ....+.*5..?.S...
0030: 80 f9 86 d3 a7 7f 0f 41 f0 29 24 ca 01 6d f8 9a .......A.)$..m..
0040: a0 35 cb 4e 8e 6c 0b 39 67 f9 5f c2 1b 4f a8 a1 .5.N.l.9g._..O..
0050: d7 51 4b 52 56 77 e5 d0 c9 5d af 24 f9 30 78 97 .QKRVw...].$.0x.
0060: 11 2e c5 7b c7 db ff 67 cb e1 88 15 9c 4a 7f 1d ...{...g.....J..
0070: 64 d4 58 96 27 cf a5 9e 10 8c 14 f2 57 32 c5 f1 d.X.'.......W2..
0080: 57 38 ac bb d6 be 19 8e 05 ff 83 17 14 90 23 3a W8............#:
0090: ad c0 88 81 3c 34 41 6b de 2c 72 dd 2c da 0d 9f ....<4Ak.,r.,...
00a0: d8 7a 9f d3 81 5d e4 06 d4 0a c7 9b d6 ad 4e c5 .z...]........N.
00b0: a4 67 01 f2 6b 46 6e 3a f6 6c 10 ab 54 bd 31 ab .g..kFn:.l..T.1.
00c0: e8 8b a5 ce 71 60 93 ed d0 64 0e 14 3c 36 18 fb ....q`...d..<6..
00d0: 7e 86 2d 70 6f 8e f3 ad 96 d0 fe cf 7c 5e 24 98 ~.-po.......|^$.
00e0: e3 a0 d7 c0 9e 77 09 50 bc 67 48 06 3c 34 c4 d9 .....w.P.gH.<4..
00f0: 22 63 a6 69 43 6b 0a 3d 6f 96 72 c9 6a 53 e9 6c "c.iCk.=o.r.jS.l
0100: 98 c7 b5 32 d2 ...2.
tls_read: want=5, got=5
0000: 14 03 01 00 01 .....
tls_read: want=1, got=1
0000: 01 .
tls_read: want=5, got=5
0000: 16 03 01 00 30 ....0
tls_read: want=48, got=48
0000: 36 df 89 73 10 ff 79 2d 2b 32 b8 3d a0 d8 56 d8 6..s..y-+2.=..V.
0010: f3 c9 24 8d e4 92 12 b5 33 73 bf 98 65 30 9f eb ..$.....3s..e0..
0020: df 4d 35 df 35 8e cd a7 ad ff b6 35 5c 17 56 aa .M5.5......5\.V.
ldap_int_sasl_open: host=shego.kuiki.net
SASL/EXTERNAL authentication started
ldap_err2string
ldap_sasl_interactive_bind_s: Unknown authentication method (-6)