samba Failed to issue the StartTLS instruction: Connect error

Failed to issue the StartTLS instruction: Connect error

In our environment we recently switch to SSSD from nscd/nslcd because of the ability of caching credentials, it’s quite nice. However once of the things that came out of the woodwork from this project is that samba/TLS no longer worked, it worked just fine if you wanted to turn OFF encryption, but in this day in technology, that’s really no longer an option.

You can test this problem by doing the following in yoru smb.conf

# SSL Settings

ldap ssl = off

#ldap ssl = start tls

if it works, apply the fix listed below:

if it works, then there is an issue with TLS,, to fix, apply the following script:

fix.sh chmod +x

# OLD Way – Necessary for Samba

echo “binddn uid=authaccount,cn=config” >> /etc/nslcd.conf

echo “bindpw ifyouusebind” >> /etc/nslcd.conf

echo “binddn uid=authaccount,cn=config” >> /etc/pam_ldap.conf

echo “bindpw ifyouusebind” >> /etc/pam_ldap.conf

echo “TLS_REQCERT allow” >> /etc/openldap/ldap.conf

echo “tls_reqcert allow” >> /etc/nslcd.conf

echo “tls_reqcert allow” >> /etc/pam_ldap.conf

restart samba, and your shares now work….

there’s likely a way to fix this with SSSD, I don’t have the answer yet, but will post one as soon as one exists, but wanted to get this out there to others who may already be using SSSD/Samba/LDAP together.

hosted Linux servers at www.zwiegnet.com/go