Cisco Smart Software Manger LDAP TLS Handshake failed

[alois.heilmaier]

Hi, 

- configured ldap on the smart software manager on prem  (cssm).

- but on submitting the configuration I get a connection error.

- wireshark trace shows an Internal Server Error (80) (sent from the client)

- it does not matter if I enable or disable cert validation on cssm.

- There is no log for ldap on the system. Seems that ldap is hidden in docker container "backend"

- parsing /var/log/messages, does not show any useful information.

Any hints on how to debug ldap and tls connectoin errors on the system ?

Best regards

Alois

[marce1000]

 - Usually due to a cipher-mismatch issue, which client+version are you using ?

 M.

[alois.heilmaier]

unfortunately there is a match in the cipher suite. (uses 0x0033 TLS_DHE_RSA_WITH_AES_128_CBC_SHA)

I thought about the many extions parameters the client provides, but if the server can't fulfull them, i think there will be an error on the server side.

Due to the error I upgraded vom 08-202004 to the newest 08-202006 Version of cisco smart software manager.