<html><head><style type="text/css"></style></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt;color:#000000;">I am trying to set up LDAP monitoring of Secure LDAP servers.<br>the version of the plugin is: <br> <br><span style="font-weight: bold;">check_ldaps v1753 (nagios-plugins 1.4.11)</span><br><br>and I am running Nagios 3.06.<br>The problem I get is that I cannot connect at all to the secure port on the Directory Servers, or the Directory Proxy Server...<br>I get the following:<br><span style="font-weight: bold;">ldap_bind: Can't contact LDAP server (-1)</span><br style="font-weight: bold;"><span style="font-weight: bold;">Could not bind to the ldap-server</span><br style="font-weight: bold;">I have tried using the IP of the host, the hostname with and without the fqdn...<br>the command is:<br><br><br><span style="font-weight: bold;">./check_ldaps -H host.example.com -b ou=people,o=something,dc=example,dc=com -p 3636 -D uid=12345,ou=applications,o=something,dc=example,dc=com -P password -3</span><br><br>the error I see in the proxy server log is:<br><br><span style="font-weight: bold;">[23/Dec/2008:14:15:19 -0800] - CONNECT - INFO - conn=1347 client=xxx.xxx.xxx.xxx:46075 server=xxx.xxx.xxx:3636 protocol=LDAPS</span><br style="font-weight: bold;"><span style="font-weight: bold;">[23/Dec/2008:14:15:19 -0800] - PROFILE - INFO - conn=1347 assigned to connection handler cn=default connection handler, cn=connection handlers, cn=config</span><br style="font-weight: bold;"><span style="font-weight: bold;">[23/Dec/2008:14:15:19 -0800] - DISCONNECT - INFO - conn=1347 reason="other" msg="Exception caught while polling client connection LDAPS.xxx.xxx.xxx.xxx.46075 -- javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?"</span><br><br>and the other error on the Proxy I see is:<br><span style="font-weight: bold;">[23/Dec/2008:14:32:35 -0800] - DISCONNECT - INFO - conn=1358 reason="other" msg="Exception caught while polling client connection LDAPS.xxx.xxx.xxx.xxx.36580 -- javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?"</span><br><br>I can connect fine from the Nagios server with a commandline LDAP browser...<br><br>Any and all help appreciated.<div> </div><div><font color="#4040ff" face="comic sans ms"><strong>David Cooley <br>Messaging and Identity Management Administrator<br></strong></font></div> <div><img src="http://us.i1.yimg.com/us.yimg.com/i/mesg/tsmileys2/32.gif"></div><div><br></div></div><br> </body></html>