# OpenLdap TLS Configurations

**URL:** https://forums.suse.com/t/openldap-tls-configurations/2837
**Category:** General
**Created:** [May 18, 2016, 10:41am UTC](https://forums.suse.com/t/openldap-tls-configurations/2837 "2016-05-18T10:41:34Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![sdharmacse](https://avatars.discourse-cdn.com/v4/letter/s/85f322/32.png) [@sdharmacse](https://forums.suse.com/u/sdharmacse)
#### Post date: [May 18, 2016, 10:41am UTC](https://forums.suse.com/t/openldap-tls-configurations/2837/1 "2016-05-18T10:41:34Z")

</div>

Hi ,

I am trying to configure TLS to my OpenLdap server which is running in Ubuntu 14.04 . I have installed openldap by using the packages of SLAPD and ldap utilities. and I have created DIT by using PHPLdapAdmin Web interface. Now i have created Self singed Certificate and modified LDAP configurations by using the .ldif . but while check TLS by using ldapsearch command that is

ldapsearch -ZZ

Error:  
ldap\_start\_tls: Protocol error (2)  
additional info: unsupported extended operation

I have followed the below link , i am using for TLS configurations

> **[Configuring OpenLDAP with SSL/TLS on Debian](http://mindref.blogspot.in/2010/12/debian-openldap-ssl-tls-encryption.html)**
>
> It is recommended that communication between clients and ldap server be encrypted. Before we enable encryption for ldap server we need SSL p...

Please help me out for resolving the issue . Thanks in advance

---

<div class="post-metadata">

### Author: ![LLParse](https://avatars.discourse-cdn.com/v4/letter/l/d9b06d/32.png) [@LLParse](https://forums.suse.com/u/LLParse)
#### Post date: [June 6, 2016, 6:25pm UTC](https://forums.suse.com/t/openldap-tls-configurations/2837/2 "2016-06-06T18:25:30Z")

</div>

Hi @sdharmacse,

I’ve gone through and setup my own OpenLDAP server on Ubuntu 14.04 with phpLDAPadmin with TLS authentication. In doing so, I experienced your error when TLS wasn’t properly configured. There are many possible explanations.

Could you post the following files:  
/etc/ldap/ldap.conf  
/etc/default/slapd  
tls-config.ldif

Also, if you wouldn’t mind running the following commands on the host (as user ‘root’ or ‘openldap’):  
ps -ef | grep slapd  
netstat -lnp | grep slapd

It might also be worth viewing this bug and verifying the permissions on your key/certificate (since I am sharing these files with apache2 and slapd, i ran into this):  
[https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/264427](https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/264427)

Thanks,  
James