On Thu, Feb 07, 2008 at 03:45:08PM -0500, McGraw, Robert P wrote:
I want to monitor our ldaps servers and also want to get the ssl certificate notification.
In the bb.host file I have set the following.
ldap://ldaphost.math.purdue.edu/ - returns green ldaps://ldaphost.math.purdue.edu/ - returns failed
I am trying to track down why ldaps is failing.
SSL-encrypted ldap - ldaps - is rather non-standard, there are at least two different implementations of it.
If your ldaps service has a specific port assigned to it - different from the normal un-encrypted ldap service - then you can just use "ldaps" (no URI behind it) to check the SSL certificate and that the port is open. With the ldap URI Hobbit uses the OpenLDAP method (really the "starttls" LDAP protocol method) - unfortunately, this method hides the LDAP server certificate so it cannot be checked.
Regards, Henrik