Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem with reaching LDAP via IPSEC

    Scheduled Pinned Locked Moved General pfSense Questions
    2 Posts 1 Posters 1.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • W
      warpil
      last edited by

      Existing 2 LAN - LAN1 and LAN2. While LAN1 - 192.168.0.0/24 , LAN2 is 10.50.0.0/24 and connectivity to LAN2 happens through IPSEC tunnel with BINAT (all LAN1 masqueraded under 1 public IP)

      As i understand - connectivity to LDAP occurs from localhost.
      So my pFsense box can't reach LDAP server located in LAN2.
      I've tried to make manual NAT rule for ipsec where all outgoing traffic from 127.0.0.0/8 forwarded to LAN2 and nated under public IP .. but not sure if i made this right…
      Log says only following: php: /system_usermanager_settings_ldapacpicker.php: ERROR! ldap_get_user_ous() could not bind anonymously to server .

      There is no authentication on LDAP (anonymous logon allowed) and i able to connect to LDAP through ldap browser from PC in LAN1.

      How i may force pFsense to understand where to connect?

      1 Reply Last reply Reply Quote 0
      • W
        warpil
        last edited by

        Debug patch gave following output:
        dap_bind_s
        ldap_simple_bind_s
        ldap_sasl_bind_s
        ldap_sasl_bind
        ldap_send_initial_request
        ldap_new_connection 1 1 0
        ldap_int_open_connection
        ldap_connect_to_host: TCP 10.20.0.100:389
        ldap_new_socket: 15
        ldap_prepare_socket: 15
        ldap_connect_to_host: Trying 10.20.0.100:389
        ldap_pvt_connect: fd: 15 tm: -1 async: 0
        attempting to connect:
        connect errno: 65
        ldap_close_socket: 15
        ldap_err2string

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.