multiple servers in DNS and TLS

[manu@netbsd.org (Emmanuel Dreyfus)]

Hi

I hope this is not covered in a FAQ (I searched without success): how do
I configure clients to query multiple LDAP servers while using TLS? 

Listing the servers in ldap.conf's URI works, but I'd prefer to have the
server list stored in DNS, as it would allow adding a server without the
need to change all clients configuration.

Having a rotative DNS for ldap.example.net cause the TLS checks to fail.

And OpenLDAP client library does not perform DNS SRV lookups.

Is there some kind of trick to get this done properly?

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org