Re: Different TLSVerifyClient possible?

[Dieter Kluenter <dieter@dkluenter.de>]

Martin Lesser <admin-openldap@better-com.de> writes:

> Kent Soper writes:
>> For clarification, /etc/ldap.conf is the LDAP PAM configuration file.
>
> No. /etc/[openldap|ldap/]ldap.conf is also used by openldap itself and
> contains at least the uri|host, searchbase etc. which are used by
> ldapsearch et al. Only some (linux-) distributions (debian) split
> ldap.conf (for openldap) and pam_ldap.conf (for pam_ldap) into two
> parts.

Just to make it clear,  pam_ldap requires a configuration file, which
by default is /etc/ldap.conf, but can be renamed at compile time. Any
libldap client requires a configuration file, which by default is
{PREFIX}/etc/openldap/ldap.conf. Both configuration files have nothing
in common. But you MAY rename 'sysconfdir' and 'with-ldap-conf-file'
that both applications use the same configuration file.

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter(at)dkluenter.de
http://www.avci.de