Re: secure replication (slurpd, TLS)

[Norbert Klasen <norbert.klasen@daasi.de>]

--On Freitag, 16. November 2001 10:51 +0100 Serguei Alifanov 
<alifanov@financial.com> wrote:

> If I delete port number 636 from config file - everething is OK!
> Replication works over the non encrypted connection (port 389).

If you specify port 636 (ldaps), the server expects an SSL handshake first. 
With TLS however, an LDAPv3 connection is established first and then 
encryption is switched on with the StartTLS exteneded operation. So you 
should use the default ldap port with TLS.
The check that the communication is actually encrypted use a tool such as 
ethereal.

--
Norbert Klasen
DAASI International GmbH                 phone: +49 7071 29 70336
Wilhelmstr. 106                          fax:   +49 7071 29 5114
72074 Tübingen                           email: norbert.klasen@daasi.de
Germany                                  web:   http://www.daasi.de