If I specify the entry "TLSVerifyClient demand" in slapd.conf,does this mean that I am forcing the clients to send a certificate. Do I need to generate client certificates for that? In short do I need ca cert,server cert and also the client cert? Regards, Gagnesh