Re: LDAP and TLS/SSL (was: Re: Afg! Client won't use LDAP)

[Phil Dibowitz <phil@ipom.com>]

Mitrana Cristian wrote:
> It could be a hostname/certificate problem. If the server's cert is tied 
> to the FQDN then the outside clients
> work as the cert is correct, but if you connect from the server itself 
> to "localhost" then the certificate
> is no longer valid. By the way,I think the SSL/TLS could be set up using 
> "minssf" directive.


Good Call!! I haven't tested this, but the cert was made using the 
internal 192.168 addy, and the server is using localhost to contact 
itself! Thus I'd bet money that's the problem!

Also, I don't see a reference to this minssf directive... where are you 
getting that?

Thanks!
--
Phil Dibowitz                             phil@ipom.com
Freeware and Technical Pages              Insanity Palace of Metallica
http://home.earthlink.net/~jaymzh666/     http://www.ipom.com/

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
 - Benjamin Franklin, 1759