Re: reg ldap over ssl

[Philip Guenther <guenther+ldapsoft@sendmail.com>]

On Wed, 2 Jul 2008, prasanth allada wrote:
> i used ldap_initialize and tried initializing the connection using the 
> CA certificate. i still am getting the same error.

Uh huh.  I wrote:
> > Right, because ldap_start_tls_s() performs the LDAP start TLS operation,
> > but for ldaps the client is supposed to simply negotiate TLS/SSL upon
> > connection, without sending an LDAP operation first.

I.e., don't use ldap_start_tls_s() with an "ldaps" URI!  Simply remove 
that call from your code.  SSL will automatically be negotiated when the 
connection is actually opened.


Philip Guenther