# LDAPS confguration issue

**URL:** <https://forum.ansible.com/t/ldaps-confguration-issue/30686>\
**Category:** AWX Project\
**Created:** [June 28, 2019, 6:19pm UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686 "2019-06-28T18:19:09Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nilesh\_Jaiswal](https://avatars.discourse-cdn.com/v4/letter/n/5f9b8f/32.png) [@Nilesh\_Jaiswal](https://forum.ansible.com/u/Nilesh_Jaiswal)\
**Post date:** [June 28, 2019, 6:19pm UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686/1 "2019-06-28T18:19:09Z")

</div>

Dear All,

I followed complete documentation to configure LDAP it’s working fine, But when I change the TLS setting ON I am getting connection error for that server.

2019-06-28 17:37:43,200 DEBUG django\_auth\_ldap Initiating TLS

2019-06-28 17:37:43,208 WARNING django\_auth\_ldap Caught LDAPError while authenticating someuser: CONNECT\_ERROR({‘info’: ‘error:14090086:SSL routines:ssl3\_get\_server\_certificate:certificate verify failed (unable to get local issuer certificate)’, ‘desc’: ‘Connect error’},)

2019-06-28 17:37:43,235 DEBUG django\_auth\_ldap Initiating TLS

I also provided the path of the certificate as below, not sure what is missing

Any help would be appreciated.

```auto
"AUTH_LDAP_CONNECTION_OPTIONS": {
        "OPT_NETWORK_TIMEOUT": 30,
        "OPT_REFERRALS": 0,
        "OPT_X_TLS_NEWCTX": 0,
        "OPT_X_TLS_CACERTFILE": "/etc/openldap/cacerts/mycertsvr.cer"
    },

```

---

<div class="post-metadata">

**Author:** ![rpetrell](https://avatars.discourse-cdn.com/v4/letter/r/b4bc9f/32.png) [@rpetrell](https://forum.ansible.com/u/rpetrell)\
**Post date:** [July 1, 2019, 12:44am UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686/2 "2019-07-01T00:44:17Z")

</div>

Nilesh,

I suspect you’re hitting a bug I’m actually currently investigating.

Does this patch resolve things for you?

[https://github.com/ansible/awx/pull/4190](https://github.com/ansible/awx/pull/4190)

---

<div class="post-metadata">

**Author:** ![Nilesh\_Jaiswal](https://avatars.discourse-cdn.com/v4/letter/n/5f9b8f/32.png) [@Nilesh\_Jaiswal](https://forum.ansible.com/u/Nilesh_Jaiswal)\
**Post date:** [July 1, 2019, 1:47am UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686/3 "2019-07-01T01:47:17Z")

</div>

Hi Ryan,

I haven’t applied this patch, do you see any risk ?

---

<div class="post-metadata">

**Author:** ![rpetrell](https://avatars.discourse-cdn.com/v4/letter/r/b4bc9f/32.png) [@rpetrell](https://forum.ansible.com/u/rpetrell)\
**Post date:** [July 2, 2019, 12:03pm UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686/4 "2019-07-02T12:03:06Z")

</div>

Nilesh,

We’ve just released a new version of AWX (6.0.0) that includes a change that I believe will resolve this for you.

---

<div class="post-metadata">

**Author:** ![Nilesh\_Jaiswal](https://avatars.discourse-cdn.com/v4/letter/n/5f9b8f/32.png) [@Nilesh\_Jaiswal](https://forum.ansible.com/u/Nilesh_Jaiswal)\
**Post date:** [July 2, 2019, 10:58pm UTC](https://forum.ansible.com/t/ldaps-confguration-issue/30686/5 "2019-07-02T22:58:15Z")

</div>

Thank you Ryan,  
I appreciated your response and I saw your notification as well. We will plan to deploy new version once we get maintenance windows for the same.