I am trying to authenticate different services (specifically openfire for now) against Samba Active Directory over StartTLS (port 389).
While setting openfire up, I checked this option (Use StartTLS), but when I test the connection, I get this error:
[LDAP: error code 1 - 00002020: Operation unavailable without authentication]
I have to say that when I try to connect over LDAPS (using port 636), everything goes perfectly. Anyway that is clear that the connection without encryption on 389 will not work with AD (when I tried, openfire told me that I must use encryotion layer).
Could someone help me please to connect successfully over StartTLS?
Here is my smb.conf
[global]
netbios name = S1
realm = NOURELDIN.LOCAL
workgroup = NOURELDIN
dns forwarder = 8.8.8.8
server role = active directory domain controller
idmap_ldb:use rfc2307 = yes
ldap ssl = start tls
[netlogon]
path = /usr/local/samba/var/locks/sysvol/noureldin.local/scripts
read only = No
[sysvol]
path = /usr/local/samba/var/locks/sysvol
read only = No
ps. I tried both adding and removing (ldap ssl = start tls) line with no difference.
I appreciate any help.