AD over SSL using Net/LDAP?

Has anybody gotten Net/LDAP (0.4) to work with AD over SSL? I can
connect without SSL, but not able to connect with SSL even though nmap
shows that port 636 is listening. In fact I can connect using openssl,
which reveals it's a self-signed cert.

At least one of my commercial clients has done exactly this. Are you sending
the correct encryption parameters to Net::LDAP#new/#open? Also, if you get
the head revision of Net::LDAP from rubyforge, you'll find that
Kouhei Sutou has added support for the LDAP STARTTLS verb (documentation is
in the rdoc). This of course eliminates the need for a separate port.

ยทยทยท

On 5/10/07, Amos <a.goo0h@gmail.com> wrote:

Has anybody gotten Net/LDAP (0.4) to work with AD over SSL? I can
connect without SSL, but not able to connect with SSL even though nmap
shows that port 636 is listening. In fact I can connect using openssl,
which reveals it's a self-signed cert.