# ldap error **URL:** \ **Category:** SLES Configure-Administer\ **Created:** [February 28, 2014, 6:44pm UTC](https://forums.suse.com/t/ldap-error/25196 "2014-02-28T18:44:03Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![System1](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@System1](https://forums.suse.com/u/System1)\ **Post date:** [February 28, 2014, 6:44pm UTC](https://forums.suse.com/t/ldap-error/25196/1 "2014-02-28T18:44:03Z")
Setting up MediaWiki on a SLES 11 SP3 server. Everything works fine except I need to authenticate against my LDAP server (which is OES 11). When I try to loginm, I see this error in the log files: PHP Warning: ldap\_start\_tls(): Unable to start TLS: Can’t contact LDAP server in /srv/www/wiki.msktd.com/htdocs/extensions/LdapAuthentication.php on line 203, referer: [http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main\_Page](http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main_Page) The IP address is correctly specified in LdapAuthentication.php. So I figure it is either a config issue or I need to install something, but haven’t figured it out yet. Any suggestions? Thanks, Ken ---
**Author:** ![ab1](https://avatars.discourse-cdn.com/v4/letter/a/d2c977/32.png) [@ab1](https://forums.suse.com/u/ab1)\ **Post date:** [February 28, 2014, 7:03pm UTC](https://forums.suse.com/t/ldap-error/25196/2 "2014-02-28T19:03:57Z")
On 02/28/2014 09:44 AM, KeN Etter wrote:[color=blue] > Setting up MediaWiki on a SLES 11 SP3 server. Everything works fine > except I need to authenticate against my LDAP server (which is OES > 11). When I try to loginm, I see this error in the log files: > > PHP Warning: ldap\_start\_tls(): Unable to start TLS: Can’t contact > LDAP server in > /srv/www/wiki.msktd.com/htdocs/extensions/LdapAuthentication.php on > line 203, referer: > [http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main\_Page](http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main_Page)[/color] Are you using TCP 389 or TCP 636? Any firewall on the OES server blcoking access to (presumably) eDirectory? [color=blue] > The IP address is correctly specified in LdapAuthentication.php. So I > figure it is either a config issue or I need to install something, but > haven’t figured it out yet. Any suggestions?[/color] Anything visible in ndstrace to let you know the connection is at least being made at the network and transport layers? Did MediaWiki require you to import a trusted root from a CA? The error would not lead me to think this is the problem at this point, but knowing what was done for the setup may help identify the problem. – Good luck. If you find this post helpful and are logged into the web interface, show your appreciation and click on the star below… ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [February 28, 2014, 7:30pm UTC](https://forums.suse.com/t/ldap-error/25196/3 "2014-02-28T19:30:16Z")
On Fri, 28 Feb 2014 17:03:57 GMT, ab [ab@no-mx.forums.suse.com](mailto:ab@no-mx.forums.suse.com) wrote: [color=blue] > On 02/28/2014 09:44 AM, KeN Etter wrote:[color=green] > > > Setting up MediaWiki on a SLES 11 SP3 server. Everything works fine > > except I need to authenticate against my LDAP server (which is OES > > 11). When I try to loginm, I see this error in the log files: > > > > PHP Warning: ldap\_start\_tls(): Unable to start TLS: Can’t contact > > LDAP server in > > /srv/www/wiki.msktd.com/htdocs/extensions/LdapAuthentication.php on > > line 203, referer: > > [http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main\_Page](http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main_Page)[/color] > > Are you using TCP 389 or TCP 636?[/color] > Should be 389 unless I messed something up. > [color=blue] > Any firewall on the OES server blcoking > access to (presumably) eDirectory?[/color] > No. And other servers are accessing LDAP on the OES server without a > problem.[color=blue] > [color=green] > > > The IP address is correctly specified in LdapAuthentication.php. So I > > figure it is either a config issue or I need to install something, but > > haven’t figured it out yet. Any suggestions?[/color] > > Anything visible in ndstrace to let you know the connection is at least > being made at the network and transport layers? Did MediaWiki require you > to import a trusted root from a CA? The error would not lead me to think > this is the problem at this point, but knowing what was done for the setup > may help identify the problem.[/color] > ndstrace log shows nothing, log was empty - assuming I did it right. > The instructions I found for OES said to do this… ndstrace set ndstrace=nodebug ndstrace +time +tags +ldap ndstrace file on screen on Then run your LDAP process you want to trace. exit It created a 0 byte log file. Looks like I am missing something on my SLES box. Other than installing the php53-ldap module, is there any other modules I would need to install? Or other services that need to be running? Ken ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [February 28, 2014, 9:28pm UTC](https://forums.suse.com/t/ldap-error/25196/4 "2014-02-28T21:28:07Z")
The crazy thing is this works fine on my Netware box. I found a way to enable debugging on the ldap plugin for media wiki. Attempted login from my Netware box and from my SLES box. Netware box reports this: Entering authenticate Entering Connect Using TLS Connected successfully SLES box reports this: Entering authenticate Entering Connect Using TLS Failed to start TLS. Failed to connect I’m missing something on this SLES box, just can’t figure out what it is. Ken ---
**Author:** ![system](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/5012ba89e3ffb5220dac47d5ea0ba032e2fe1cb6.png) [@system](https://forums.suse.com/u/system)\ **Post date:** [February 28, 2014, 11:09pm UTC](https://forums.suse.com/t/ldap-error/25196/5 "2014-02-28T23:09:49Z")
On Fri, 28 Feb 2014 17:03:57 GMT, ab [ab@no-mx.forums.suse.com](mailto:ab@no-mx.forums.suse.com) wrote: [color=blue] > On 02/28/2014 09:44 AM, KeN Etter wrote:[color=green] > > > Setting up MediaWiki on a SLES 11 SP3 server. Everything works fine > > except I need to authenticate against my LDAP server (which is OES > > 11). When I try to loginm, I see this error in the log files: > > > > PHP Warning: ldap\_start\_tls(): Unable to start TLS: Can’t contact > > LDAP server in > > /srv/www/wiki.msktd.com/htdocs/extensions/LdapAuthentication.php on > > line 203, referer: > > [http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main\_Page](http://testwiki.msktd.com/index.php?title=Special:UserLogin&action=submitlogin&type=login&returnto=Main_Page)[/color] > > Are you using TCP 389 or TCP 636? Any firewall on the OES server blcoking > access to (presumably) eDirectory? > [color=green] > > > The IP address is correctly specified in LdapAuthentication.php. So I > > figure it is either a config issue or I need to install something, but > > haven’t figured it out yet. Any suggestions?[/color] > > Anything visible in ndstrace to let you know the connection is at least > being made at the network and transport layers? Did MediaWiki require you > to import a trusted root from a CA? The error would not lead me to think > this is the problem at this point, but knowing what was done for the setup > may help identify the problem.[/color] Finally got it working…deleted all the media wiki and ldap authentication files, grabbed the latest versions and reinstalled everything from scratch. What a day. 🙂