LDAP is down

[Predrag Punosevac]

Ok. I have a solution for this. Namely I was at least smart enough not
to upgrade all 10 OpenBSD servers to 6.6. I left one :-) running 6.5.
It was not LDAP backup server which I also upgraded yesterday but one
of new mighty backup firewalls machines which was idling. I have fully
functional LDAP server running on it. I tested only one computing node
with new setup (lov1) and works like a charm. You will now have to
wait 2-3h until I globally push changes. I want to make sure I don't
screw up anything else before this goes into production.

Cheers,
Predrag


On Wed, Oct 23, 2019 at 12:40 PM Predrag Punosevac
<predragp at andrew.cmu.edu> wrote:
>
> Hi Autonians,
>
> The problem with LDAP appears to be more serious than I originally
> anticipated. I have regenerated SSL certificates and TLS handshake
> still fails. I am working with developers upstream to see why is this
> happening. I don't want to enact nuclear option and allow your
> password to be transferred in clear text between LDAP server and
> computing nodes. I would much rather "downgrade" installation if
> needed than take that path.
>
> Thanks for your patience.
>
> Predrag