[Date Prev][Date Next] [Chronological] [Thread] [Top]

HEADS UP: specifying slapd listeners



I've updated the SLAPD startup arguments to better handle
binding to specific addresses in lieu of TLS and other
additional listeners.  You can now have N listeners (of
which a subset can be TLS).  The default is "ldap:///";.

Example:
  slapd -p 9009 -h "ldaps:/// ldap://localhost:123/ ldap://10.1.1.1/"; ...

Bind to:
  INADDR_ANY:636 (LDAP over TLS)
  localhost:123 (LDAP)
  10.1.1.1:9009 (LDAP)

-p/-P are now used to change the default ldap:/// or ldaps:///
port.  

(note: if the host has multiple addresses associated with it,
only the first address is used).

I'll likely add ACL support for bind address/port, peer
address/port, and TLS status soon.

Kurt