Re: openldap and tls

To: openldap-software@OpenLDAP.org
Subject: Re: openldap and tls
From: Michael Ströder <michael@stroeder.com>
Date: Thu, 14 Feb 2008 16:24:10 +0100
In-reply-to: <000701c86f1c$9a4aa610$0200a8c0@satellite>
References: <003b01c86ee4$b6c67f40$0200a8c0@satellite> <47B41827.9000703@stroeder.com> <000701c86f1c$9a4aa610$0200a8c0@satellite>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7

Dave wrote:

When you say client i'm assuming your refering to the ldap client,


Yes.

configuration file /usr/local/etc/openldap/ldap.conf,

Concerning what the server slapd requires to come from the client is configured in the server's configuration.

>Michael Ströder wrote:

See man 5 slapd.conf for learning about what option TLSVerifyClient means.

You should take my advice more literally. I'm not inventing comments just for fun. Please first check TLSVerifyClient in your slapd.conf.

Ciao, Michael.

Follow-Ups:
- Re: openldap and tls
  - From: "Dave" <dmehler26@woh.rr.com>

References:
- openldap and tls
  - From: "Dave" <dmehler26@woh.rr.com>
- Re: openldap and tls
  - From: Michael Ströder <michael@stroeder.com>