replication and tls

[richard lucassen <mailinglists@lucassen.org>]

Hello list,

Using version 2.2.23 (Debian Sarge) with slurpd-replication, I see that
the certificates are exchanged and replication works, but the
replicator's username/pass is passing cleartext over the line.

-- master slapd.conf:
replica uri=ldap://ldapslave.example.com starttls=yes
        binddn=cn=replicator,dc=example,dc=com
        bindmethod=simple credentials=secret

-- master ldap.conf:
TLS_CACERT /etc/ldap/cacert.crt


-- slave slapd.conf
TLSCACertificateFile /etc/ldap/cacert.crt
TLSCertificateFile /etc/ldap/ldapslave.example.com-cert.pem
TLSCertificateKeyFile /etc/ldap/ldapslave.example.com-key.pem

When connecting to the servers (master and slave) with gq, tls is
working. Anyone a hint?

Richard.

-- 
___________________________________________________________________
It is better to remain silent and be thought a fool, than to speak
aloud and remove all doubt.

+------------------------------------------------------------------+
| Richard Lucassen, Utrecht                                        |
| Public key and email address:                                    |
| http://www.lucassen.org/mail-pubkey.html                         |
+------------------------------------------------------------------+