Add notes for 2017-02-27

content/post/2017-02.md

@@ -229,3 +229,25 @@ UPDATE 58633
 
 - This works but I'm thinking I'll wait on the replacement as there are perhaps some other places that rely on `http://hdl.handle.net` (grep the code, it's scary how many things are hard coded)
 - Send message to dspace-tech mailing list with concerns about this
+
+## 2017-02-27
+
+- LDAP users cannot log in today, looks to be an issue with CGIAR's LDAP server:
+
+```
+$ openssl s_client -connect svcgroot2.cgiarad.org:3269
+CONNECTED(00000003)
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=20:unable to get local issuer certificate
+verify return:1
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=21:unable to verify the first certificate
+verify return:1
+---
+Certificate chain
+ 0 s:/CN=SVCGROOT2.CGIARAD.ORG
+   i:/CN=CGIARAD-RDWA-CA
+---
+```
+
+- For some reason it is now signed by a private certificate authority

public/2017-02/index.html

@@ -92,7 +92,7 @@ Looks like we’ll be using cg.identifier.ccafsprojectpii as the field name
   
   "headline": "February, 2017",
   "url": "https://alanorth.github.io/cgspace-notes/2017-02/",
-  "wordCount": "1595",
+  "wordCount": "1662",
   
   
   "datePublished": "2017-02-07T07:04:52-08:00",
@@ -437,6 +437,31 @@ UPDATE 58633
 <li>Send message to dspace-tech mailing list with concerns about this</li>
 </ul>
 
+<h2 id="2017-02-27">2017-02-27</h2>
+
+<ul>
+<li>LDAP users cannot log in today, looks to be an issue with CGIAR&rsquo;s LDAP server:</li>
+</ul>
+
+<pre><code>$ openssl s_client -connect svcgroot2.cgiarad.org:3269
+CONNECTED(00000003)
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=20:unable to get local issuer certificate
+verify return:1
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=21:unable to verify the first certificate
+verify return:1
+---
+Certificate chain
+ 0 s:/CN=SVCGROOT2.CGIARAD.ORG
+   i:/CN=CGIARAD-RDWA-CA
+---
+</code></pre>
+
+<ul>
+<li>For some reason it is now signed by a private certificate authority</li>
+</ul>
+
   
 
   

public/index.xml

@@ -283,6 +283,31 @@ UPDATE 58633
 <ul>
 <li>This works but I’m thinking I’ll wait on the replacement as there are perhaps some other places that rely on <code>http://hdl.handle.net</code> (grep the code, it’s scary how many things are hard coded)</li>
 <li>Send message to dspace-tech mailing list with concerns about this</li>
+</ul>
+
+<h2 id="2017-02-27">2017-02-27</h2>
+
+<ul>
+<li>LDAP users cannot log in today, looks to be an issue with CGIAR’s LDAP server:</li>
+</ul>
+
+<pre><code>$ openssl s_client -connect svcgroot2.cgiarad.org:3269
+CONNECTED(00000003)
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=20:unable to get local issuer certificate
+verify return:1
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=21:unable to verify the first certificate
+verify return:1
+---
+Certificate chain
+ 0 s:/CN=SVCGROOT2.CGIARAD.ORG
+   i:/CN=CGIARAD-RDWA-CA
+---
+</code></pre>
+
+<ul>
+<li>For some reason it is now signed by a private certificate authority</li>
 &lt;/ul&gt;</description>
     </item>
     

public/post/index.xml

@@ -283,6 +283,31 @@ UPDATE 58633
 <ul>
 <li>This works but I’m thinking I’ll wait on the replacement as there are perhaps some other places that rely on <code>http://hdl.handle.net</code> (grep the code, it’s scary how many things are hard coded)</li>
 <li>Send message to dspace-tech mailing list with concerns about this</li>
+</ul>
+
+<h2 id="2017-02-27">2017-02-27</h2>
+
+<ul>
+<li>LDAP users cannot log in today, looks to be an issue with CGIAR’s LDAP server:</li>
+</ul>
+
+<pre><code>$ openssl s_client -connect svcgroot2.cgiarad.org:3269
+CONNECTED(00000003)
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=20:unable to get local issuer certificate
+verify return:1
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=21:unable to verify the first certificate
+verify return:1
+---
+Certificate chain
+ 0 s:/CN=SVCGROOT2.CGIARAD.ORG
+   i:/CN=CGIARAD-RDWA-CA
+---
+</code></pre>
+
+<ul>
+<li>For some reason it is now signed by a private certificate authority</li>
 &lt;/ul&gt;</description>
     </item>
     

public/tags/notes/index.xml

@@ -282,6 +282,31 @@ UPDATE 58633
 <ul>
 <li>This works but I’m thinking I’ll wait on the replacement as there are perhaps some other places that rely on <code>http://hdl.handle.net</code> (grep the code, it’s scary how many things are hard coded)</li>
 <li>Send message to dspace-tech mailing list with concerns about this</li>
+</ul>
+
+<h2 id="2017-02-27">2017-02-27</h2>
+
+<ul>
+<li>LDAP users cannot log in today, looks to be an issue with CGIAR’s LDAP server:</li>
+</ul>
+
+<pre><code>$ openssl s_client -connect svcgroot2.cgiarad.org:3269
+CONNECTED(00000003)
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=20:unable to get local issuer certificate
+verify return:1
+depth=0 CN = SVCGROOT2.CGIARAD.ORG
+verify error:num=21:unable to verify the first certificate
+verify return:1
+---
+Certificate chain
+ 0 s:/CN=SVCGROOT2.CGIARAD.ORG
+   i:/CN=CGIARAD-RDWA-CA
+---
+</code></pre>
+
+<ul>
+<li>For some reason it is now signed by a private certificate authority</li>
 &lt;/ul&gt;</description>
     </item>