Package: slapd
Version: 2.2.23-8
Severity: important

My setup includes one "master" ldap server and four (two operational)
replicas.  To protect sensible data during replication I set up TLS on
the replicas.  Neither ldapsearch (from ldap-utils) nor slurpd manage
to establish more then one to seven connections.  Then the conection
freezes during the TLS negotiation fase and no further conections are
able, until the replicated slapd server is reset. Unencrypted lookups
however still work without problems.

Using stunnel for encryption (via the Loopback interface) works
without problems.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.8
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

Versions of packages slapd depends on:
ii  coreutils [fileutils]       5.2.1-2      The GNU core utilities
ii  debconf                     1.4.34       Debian configuration management sy
ii  fileutils                   5.2.1-2      The GNU file management utilities 
ii  libc6                       2.3.2.ds1-22 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-17    Berkeley v4.2 Database Libraries [
ii  libgcrypt11                 1.2.0-6      LGPL Crypto library - runtime libr
ii  libgnutls11                 1.0.16-9     GNU TLS library - runtime library
ii  libgpg-error0               1.0-1        library for common error values an
pn  libiodbc2                                Not found.
ii  libldap2                    2.1.30-3     OpenLDAP libraries
pn  libltdl3                                 Not found.
ii  libsasl2                    2.1.19-1.5   Authentication abstraction library
pn  libslp1                                  Not found.
ii  libwrap0                    7.6.dbs-6    Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-perl]  5.8.4-5      Larry Wall's Practical Extraction 
ii  psmisc                      21.5-1       Utilities that use the proc filesy
ii  zlib1g                      1:1.2.2-3    compression library - runtime


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to