X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=u2OMrD1
	3d897rC1qw2KFfJ7JJCYSpONHczlwxC4odzXZrrh8p5Bv3qI0Z/VbKmCkow5Vxyz
	g4mxYBnFj50J+WjCouuKDlHBoi4Bk5m2Qymq1gXNZ8zf55IlCnWTZfJRsGoB0Gmy
	zAxVbpnEPvK1X1PmEzq0t1khiZxpMReUZuFQ=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; s=default; bh=kDqm/neLlZrhD
	ar8zoYkeSFvWaY=; b=x9k9tioDg2yHqCZrdBbLlhNS6kOvjcHz7GjNjmnHb0m3w
	bz2Zsvw279U8qQVp5Vypc0czGDALAe0I8Jjoz0V+E2VqhCsYHN1FEvUpS6IbpXP0
	O0+B5mHRPXBHkfvLQYSbuZZ//YGL+Dx50LP9MF5s1ea85lcb5b2PZaAlITG9QE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-1.7 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.1 spammy=HX-Google-Smtp-Source:APXvYqz, H*c:alternative, company, certified
X-HELO: mail-qt1-f170.google.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=gmail.com; s=20161025;        h=mime-version:references:in-reply-to:from:date:message-id:subject:to;        bh=iGwfX6LLP42mZoyBbfEl6YOPdG2jC+YjSRK6dx204eE=;        b=i88R4lGQDrFb39HRhq85uD/e/CYPzJb3nyt3jV3Ls1dHyOi5dneEcROpJILB17Qpt/         YWqT7QyA6ze9Dn/u45lvbC0OhjVgiT1tHzosOA3NPAKdoweUV6uONcuMVp1x6kQZtdzg         7NuSVTJbeDJNcYSM6bcrtwIumloV2rTmIkOc0ZeFd1xN8gcuarZ+P+qTJfBuU7OEMzEW         3pK1pWdsXaAa121LAcGsqxR9jVEOr/86OfKJh38liS807VzD3x4Sm7NCKUpcvc18E7Np         /7JI/v5wIz0vLfzT8rkGngUMJ611EnvOsnrpB5KP+9dK/DuAn8H6KFqrqL/FFOieHZP9         BRHg==
MIME-Version: 1.0
References: <CAN9EdkY=zrEv31+PD8XXu9rVw4H_eXLEoMk5u=7H02Q1Xu7-Wg AT mail DOT gmail DOT com> <87ftmje5zb DOT fsf AT Rainer DOT invalid> <CAN9EdkYzh558w=CG3UkzgN0rg98eVx2V0BcdktEwVEW3dS1qCQ AT mail DOT gmail DOT com> <874l2y4ulo DOT fsf AT Rainer DOT invalid> <CAN9EdkYG1aFnaMAPM3jg=0psRoiS1rF7Hze618UYj1mHByjKbg AT mail DOT gmail DOT com> <228DE7899A9CF9C913C8B1B8 AT 192 DOT 168 DOT 1 DOT 39>
In-Reply-To: <228DE7899A9CF9C913C8B1B8@192.168.1.39>
From: David Goldberg <dsg18096 AT gmail DOT com>
Date: Mon, 5 Aug 2019 16:06:36 -0400
Message-ID: <CAN9Edkbv6ZaHyLs3MVyYapgYa3XiXU2D+kr8o2zTCJivk8h0-w@mail.gmail.com>
Subject: Re: Openldap 2.4.48-1 vs my company's pki
To: cygwin AT cygwin DOT com
Content-Type: text/plain; charset="UTF-8"
X-IsSubscribed: yes

Correct, openssl s_client works, as does the older build of ldapsearch.  I
can't find any .ldaprc nor ldap.conf files on my system.

Unfortunately I've only set up my system for end user purposes. Building
from source will be a challenge. Any guidance (a link is fine) on what
packages to install to set that up? And do I need to worry about the
.cygport and patch files in the source distribution or will configure pick
them up?

Thanks

On Mon, Aug 5, 2019, 15:25 Quanah Gibson-Mount <quanah AT symas DOT com> wrote:

> --On Monday, August 05, 2019 9:22 AM -0400 David Goldberg
> <dsg18096 AT gmail DOT com> wrote:
>
> > Sorry, was away from work over the weekend. I just tested with openssl
> > s_client and it works just fine.  Version is 1.1.1.  there is no self
> > signed certificate. It's signed with the company pki rather than
> > commercial and I've properly installed that chain. The problem send to be
> > with the new build, at least the weird ldd output leads me to that
> > conclusion. I'll try to find some time to build from source and see if it
>
> Do you mean you connected to the ldap server using OpenSSL s_client to
> confirm that works?  If that works and the ldapsearch (or other ldap
> client) binary does not, then you likely have a global /etc/ldap.conf (or
> whereever this build looks for it) or a ~/.ldaprc file that defines the
> path or file to find the CA certificate that would need updating.
>
> Regards,
> Quanah
>
>
> --
>
> Quanah Gibson-Mount
> Product Architect
> Symas Corporation
> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
> <http://www.symas.com>
>
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple