RE: Hanging during ldaps

[Goucher, A. <ada...@hp...>]

> ># search so we know we are connected
> >p_search =3D p_handle.search("", ldap.SCOPE_BASE, "objectclass=3D*")
> > =20
> >
> This call looks strange to me: iPlanet has always wanted a real base=20
> there (i.e., no "" as you possibly could using Active=20
> Directory, but a=20
> correct search base for your server like "dc=3Dldapserver, dc=3Dacme,=20
> dc=3Dcom" or similar).
>=20
> If you say it does work using plain LDAP, however, this cannot be the=20
> reason for your script hanging, still I'm amazed it does, the RFC=20
> clearly states that you must explicitly set the search base=20
> and iPlanet=20
> have always prided themselves in being standards compliant (not like=20
> that other major software vendor ;-)

I have found that "" and an actual basename are two different items with
pretty much all directory servers I have used. Searching against "" will
return information about the server in general (such as the vendor and
version) whereas searching against a proper basename gives you site
specific information
=20
> I don't know this module, however you might want to give a try to my=20
> Win32 binary of Python-LDAP, you can find it at=20
> http://www.siosistemi.it/~mcicogni/ at the beginning of the=20
> page under=20
> "Python stuff".
> Beware, your mileage may vary.

Same problem, but a newer build, thanks. :)

> If this doesn't work, either, it *might* be that your server isn't=20
> configured correctly (i.e., TLS Certificates and such): do=20
> other LDAPS=20
> client work?

Yes, I can login with different client to the ssl port. Is there a TLS
FAQ kicking around somewhere? I keep seeing it used interchangeably with
SSL but don't know anything about it.

-adam