Re: TLS with Active Directory

[Matthew Smith <mps@getbusi.com>]

On Tue, 23 Mar 2004 11:32 am, Quanah Gibson-Mount wrote:
> It sounds more like you haven't told OpenLDAP to trust the AD server's CA.
> You might want to look at 'man ldap.conf' and pay particular attention to
> the TLS_CACERT directive.
>
> You can also give a -d -1 option to the OpenLDAP binary you are using to
> connect to AD with to see what it says.

Thanks, I reinstalled windows 2000, and it is now going without needing the 
TLS_CACERT... I also changed my dns settings which might have helped.

The -d -1 option was very handy though.

Now to get the same result using python-ldap :)

Cheers

Matt Smith