Bug #14943
closed
Authentication server LDAPs Unknown CA
0%
Description
Found that if you configure an authentication server without authentication (Standard TCP 389), and after that you change the configuration to SSL/TLS encrypted, connection works but you get a Unknown CA after a while.
Unknown CA message comes from pfSense's IP address.
Found this capturing packets on port 636 from the firewall to the LDAP server (samba-ad).
To solve this, you have to delete the authentication server completely, and recreate it again using the TLS/SSL 636 option, with the same settings.
Files
Updated by Marcelo Cury 6 months ago
Weird, it seems that this only happens in the Dashboard.
Even when I remove the authentication server entirely and recreate it, the problem still happens, but only in the Dashboard.
Logs:
Updated by Marcelo Cury 6 months ago
Fixed by connecting to the console and ran menu options 16 then 11 as suggested in https://docs.netgate.com/pfsense/en/latest/troubleshooting/authentication.html
Kindly go ahead and close this bug report.
Thanks pfSense team.
Updated by