LDAP TLS Error -8023

Home » CentOS » LDAP TLS Error -8023
CentOS 1 Comment

Can somebody tell me what this error means (server, domain etc. changed to protect the innocent)?

ldapsearch -H ldap://ldapserv-1.example.com:389 -ZZ -W -D
cn=Boss,dc=example,dc=com -b dc=example,dc=com uid=testuser homeDirectory ldap_start_tls: Connect error (-11)
additional info: TLS error -8023:A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.

My google searches do not seem to provide any useful information. I am just looking for some hints as to what to look for in my configuration. I just don’t know how to interpret this error message. I am sure it is trying to tell me something but I just don’t know what.

What is really strange is I have a second ldap server which replicates with this one. It works fine so I am pretty convinced the problem is not with the ldap configuration but rather something with the certificates and/or the setup.

Thanks.

One thought on - LDAP TLS Error -8023

  • It turns out the release of 7.1 was most propitious. I updated and instead of getting the error above I received a different error:

    TLS error -8182: Peer’s certificate has an invalid signature

    That was a much more useful error message in that at least I knew what the complaint was about. It turns out I was using an incorrect key. I
    fixed that and the problem went away. So glad I went ahead with the update or I would still be wondering what was wrong.