SSL connect to LDAP

[Bruce Holt]

Hello.

I have a Delphi program that is trying to connect to LDAP on port 636 hosted
by Active Directory on a Windows 2003 server. I get a "Server Down" error
from the Delphi wrapper for Microsoft's winldap.h

Just a note, everything works fine when I connect using java over SSL.

Here is the event log error:
Event Type: Information
Event Source: NTDS LDAP
Event Category: LDAP Interface
Event ID: 1220
Date: 6/30/2004
Time: 1:18:49 PM
User: N/A
Computer: ARAGORN
Description:
LDAP over SSL will be unavailable at this time because the server was unable
to obtain a certificate.


Here is the TCP trace (10.10.1.190 is the client, 10.10.1.187 is the
server):
No. Time Source Destination Protocol
Info
2 2.541241 10.10.1.190 10.10.1.187 TCP
2518 > ldaps [SYN] Seq=0 Ack=0 Win=64240 Len=0 MSS=1460
3 2.541536 10.10.1.187 10.10.1.190 TCP
ldaps > 2518 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460
4 2.541561 10.10.1.190 10.10.1.187 TCP
2518 > ldaps [ACK] Seq=1 Ack=1 Win=64240 Len=0
5 2.542932 10.10.1.187 10.10.1.190 TCP
ldaps > 2518 [FIN, ACK] Seq=1 Ack=1 Win=65535 Len=0
6 2.542998 10.10.1.190 10.10.1.187 TCP
2518 > ldaps [ACK] Seq=1 Ack=2 Win=64240 Len=0
7 2.554604 10.10.1.190 10.10.1.187 SSLv2
Client Hello
8 2.554789 10.10.1.187 10.10.1.190 TCP
ldaps > 2518 [RST] Seq=2 Ack=1 Win=0 Len=0
Thanks,
Bruce Holt