<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    Okay, so make sure for starters that the authenticator is set to
    'AD' and not 'LDAP'.<br>
    There are then some good troubleshooting tips on<br>
        zend.to/activedirectory<br>
    You need to try to connect with "ldapsearch" and "openssl"s ssl
    client. Read the page above and it should point you in the right
    direction.<br>
    <br>
    Cheers,<br>
    Jules.<br>
    <br>
    <div class="moz-cite-prefix">On 03/06/2020 18:47, Matt Purcell via
      ZendTo wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:WM!b8da27298130f3774e9cc8c30caefef59dd94460c65d3979a80ab580b81f06e13cc555a19a70721f34df7142ed388cea!@mx.jul.es">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small">Hi,
          When trying to log in via LDAPS, the web interface gives 3
          separate errors:</div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small">-LDAP
          Error<br>
          Connected to but could not start_tls, it said<br>
          -LDAP Error<br>
          Check User: Unable to connect to any of the authentication
          servers; could not authenticate user. Please notify the system
          administrator.<br>
          -Authentication Error<br>
          The username or password was incorrect.<br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small"><br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small">/var/log/httpd/zendto_error_log
          shows error:<br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small"> [php7:warn]
          [pid 1302] [client <a href="http://160.10.211.97:57522"
            moz-do-not-send="true">160.10.211.97:57522</a>] PHP Warning:
           ldap_start_tls(): Unable to start TLS: Can't contact LDAP
          server in /opt/zendto/lib/NSSADAuthenticator.php on line 583<br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small"><br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small">Does
          this indicate an deficiency in AD config? Where should I begin
          troubleshooting? We've confirmed that a bind request did reach
          the LDAPS server.</div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small"><br>
        </div>
        <div class="gmail_default"
          style="font-family:arial,helvetica,sans-serif;font-size:small">Thanks
          in advance for any help you might offer!</div>
        <div><br>
        </div>
        -- <br>
        <div dir="ltr" class="gmail_signature"
          data-smartmail="gmail_signature">
          <div dir="ltr">
            <div>
              <div dir="ltr">
                <div>
                  <div dir="ltr">
                    <div>
                      <div dir="ltr">
                        <div>
                          <div dir="ltr">
                            <div>
                              <div dir="ltr">
                                <p
style="font-size:12.8px;background-image:initial;background-position:initial;background-repeat:initial"><font
                                    style="font-size:12.8px"
                                    face="arial, helvetica, sans-serif"><b><font
                                        color="#444444">Matthew Purcell</font></b></font></p>
                                <div style="font-size:12.8px">
                                  <div style="font-size:12.8px"><font
                                      color="#444444"><i><font
                                          face="arial, helvetica,
                                          sans-serif">Systems
                                          Administrator </font></i></font></div>
                                  <div style="font-size:12.8px">
                                    <div><font color="#444444"><span
                                          style="line-height:18px"><font
                                            size="2" face="arial,
                                            helvetica, sans-serif">Information
                                            Technology Services </font></span></font></div>
                                    <span>
                                      <div><b
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif;font-size:small"><br>
                                        </b></div>
                                      <div><b
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif;font-size:small">University
                                          of West Georgia </b><br>
                                      </div>
                                      <div><font face="arial, helvetica,
                                          sans-serif" color="#444444"><font
                                            size="2"><span
                                              style="line-height:18px">1601
                                              Maple Street, </span></font><span
                                            style="line-height:18px">Carrollton,
                                            GA  30118 </span></font><font
                                          color="#444444"><span
                                            style="line-height:18px"><font
                                              size="2" face="arial,
                                              helvetica, sans-serif"> </font></span></font></div>
                                    </span></div>
                                  <div style="font-size:12.8px"><font
                                      size="2" face="arial, helvetica,
                                      sans-serif" color="#444444"><span
                                        style="line-height:18px">p: <a
                                          href="tel:678-839-5505"
                                          value="+16788396642"
                                          style="color:rgb(17,85,204)"
                                          target="_blank"
                                          moz-do-not-send="true">678-839-5505</a> </span></font><font
                                      color="#444444"><span
                                        style="line-height:18px"><font
                                          size="2" face="arial,
                                          helvetica, sans-serif"> </font></span></font><span
style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)"> </span></div>
                                  <div style="font-size:12.8px"><font
                                      face="arial, helvetica,
                                      sans-serif" color="#444444"><a
                                        href="mailto:mpurcell@westga.edu"
                                        style="color:rgb(17,85,204)"
                                        target="_blank"
                                        moz-do-not-send="true">mpurcell@westga.edu</a> </font><font
                                      color="#444444"><span
                                        style="line-height:18px"><font
                                          size="2" face="arial,
                                          helvetica, sans-serif"> </font></span></font><font
                                      face="arial, helvetica,
                                      sans-serif" color="#444444"><font
                                        size="2"><span
                                          style="line-height:18px"><br>
                                        </span></font></font></div>
                                  <div style="font-size:12.8px"><font
                                      size="2" face="arial, helvetica,
                                      sans-serif" color="#444444"><span
                                        style="line-height:18px"><a
                                          href="http://westga.edu/its"
                                          style="color:rgb(17,85,204)"
                                          target="_blank"
                                          moz-do-not-send="true">westga.edu/its</a> </span></font><font
                                      color="#444444"><span
                                        style="line-height:18px"><font
                                          size="2" face="arial,
                                          helvetica, sans-serif"> </font></span></font></div>
                                  <div style="font-size:12.8px"><img
src="https://mail.google.com/mail/u/1/?ui=2&ik=061e4317a7&view=fimg&th=15c4530f8b8cff5b&attid=0.8&disp=emb&realattid=6a7c53ac14d71d99_0.8&attbid=ANGjdJ-QFdwT9Hu4s7RoHWy4XrL6yQS1OHcJZKmuU0dFExRRZelv62zq1BMr2Ol4Ontl0yTpBQeJPRhD4J_OXKltJMVdSEmT7ktDwg7RsUeh7ATH4rM7MYRkuhmeDrs&sz=w142-h154&ats=1495809698580&rm=15c4530f8b8cff5b&atsh=1"
                                      alt="University of West Georgia"
                                      moz-do-not-send="true" width="71"
                                      height="77" border="0"><font
                                      size="2" face="arial, helvetica,
                                      sans-serif" color="#444444"><span
                                        style="line-height:18px"><br>
                                      </span></font></div>
                                </div>
                                <div style="font-size:12.8px">This
                                  e-mail is intended solely for the
                                  addressee and may contain
                                  confidential information. If you are
                                  not the addressee please do not save,
                                  print, or retransmit,
                                  except to return to the sender.<br>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
ZendTo mailing list
<a class="moz-txt-link-abbreviated" href="mailto:ZendTo@zend.to">ZendTo@zend.to</a>
<a class="moz-txt-link-freetext" href="http://jul.es/mailman/listinfo/zendto">http://jul.es/mailman/listinfo/zendto</a>
</pre>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">Jules

-- 
Julian Field MEng CEng CITP MBCS MIEEE MACM

'Find a place inside where there's joy, and the joy will burn out
 the pain.' - Joseph Campbell

<a class="moz-txt-link-abbreviated" href="http://www.Zend.To">www.Zend.To</a>
Twitter: @JulesFM
</pre>
  </body>
</html>