Re: Cisco Smart Software Manger LDAP TLS Handshake failed

alois.heilmaier · ‎08-18-2020

Hi,

- configured ldap on the smart software manager on prem (cssm).

- but on submitting the configuration I get a connection error.

- wireshark trace shows an Internal Server Error (80) (sent from the client)

- it does not matter if I enable or disable cert validation on cssm.

- There is no log for ldap on the system. Seems that ldap is hidden in docker container "backend"

- parsing /var/log/messages, does not show any useful information.

Any hints on how to debug ldap and tls connectoin errors on the system ?

Best regards

Alois

marce1000 · ‎08-18-2020

- Usually due to a cipher-mismatch issue, which client+version are you using ?

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

alois.heilmaier · ‎08-20-2020

unfortunately there is a match in the cipher suite. (uses 0x0033 TLS_DHE_RSA_WITH_AES_128_CBC_SHA)

I thought about the many extions parameters the client provides, but if the server can't fulfull them, i think there will be an error on the server side.

Due to the error I upgraded vom 08-202004 to the newest 08-202006 Version of cisco smart software manager.