Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)?
ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11) additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.
My google searches do not seem to provide any useful information. I am just looking for some hints as to what to look for in my configuration. I just don't know how to interpret this error message. I am sure it is trying to tell me something but I just don't know what.
What is really strange is I have a second ldap server which replicates with this one. It works fine so I am pretty convinced the problem is not with the ldap configuration but rather something with the certificates and/or the setup.
Thanks.
On 03/30/2015 07:28 PM, Paul R. Ganci wrote:
Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)?
ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11) additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.
It turns out the release of 7.1 was most propitious. I updated and instead of getting the error above I received a different error:
TLS error -8182: Peer's certificate has an invalid signature
That was a much more useful error message in that at least I knew what the complaint was about. It turns out I was using an incorrect key. I fixed that and the problem went away. So glad I went ahead with the update or I would still be wondering what was wrong.
-
Paul R. Ganci