Bad news for anyone who is planning to try getting TLS and openldap to work with the solaris clients: I just heard from someone reasonably close to the LDAP development in sun, that the solaris clients in solaris 8 DOESN'T SUPPORT TLS. [as in, "there's no TLS code in there"] sigh. So, choices for secure LDAP are to either use the third-party pam_ldap, or wait until solaris 9