RE: OpenLDAP 2.07 SDK + iPlanet Directory server 4.1

[Jeff Costlow <j.costlow@f5.com>]

Err, um good question.  Now that I think about it, all the OpenLDAP tools use the start_tls extended command, so they don't have any SSL specific code in them.
I guess you might have to find external examples on how to start an SSL connection.  Note that writing a large amount of code that depends directly upon OpenSSL probably isn't a great idea in terms of portability of auth_ldap.

Please take this discussion over to the auth_ldap mailing list, we can talk more there.  It isn't really appropriate to openldap_software mailing list.

-----Original Message-----
From: HO,ELWIN (HP-Cupertino,ex1) [mailto:elwin_ho@hp.com]
Sent: Monday, April 30, 2001 10:34 AM
To: 'openldap-software@OpenLDAP.org'; 'Jeff Costlow'
Subject: RE: OpenLDAP 2.07 SDK + iPlanet Directory server 4.1


Hi,
I am new in OpenLDAP. Would you tell me which example (file name) I should
look at? (That contains SSL code??)
Thanks
Elwin

-----Original Message-----
From: Jeff Costlow [mailto:j.costlow@f5.com]
Sent: Friday, April 27, 2001 6:33 PM
To: 'HO,ELWIN (HP-Cupertino,ex1) '
Subject: RE: OpenLDAP 2.07 SDK + iPlanet Directory server 4.1


Well, according to auth_ldap 1.5.4 documentation, it only supports SSL with
the Netscape SDK, not the OpenLDAP SDK, so no.
Although I believe it should be possible if someone were to figure out how
the OpenLDAP SDK does the SSL negotiation, and if code were put into
auth_ldap to do it just like it is done by OpenLDAP  examples.
 
-----Original Message-----
From: HO,ELWIN (HP-Cupertino,ex1)
To: 'openldap-software@OpenLDAP.org'
Sent: 4/27/01 5:56 PM
Subject: OpenLDAP 2.07 SDK + iPlanet Directory server 4.1

Hi,
I have auth_ldap 1.5.4 modules that built with Openssl 0.96a and
OpenlDAP 
SDK with TLS enable. Is this module possible talk to the Directory
server 
that supports SSL only? ( iPlanet Directory server 4.1)
I guess the basic question is "can TLS client talk to SSL server".

Thanks
Elwin