Re: SASL Mech EXTERNAL disabled?

[Howard Chu <hyc@symas.com>]

Dieter Kluenter wrote:
> The update was from 2.4.17 to 2.4.18 build with openssl.
>
> ,----[ ldaprc ]
> | BASE o=avci,c=de
> | TLS_CACERT      /home/dieter/certs/avciCA.pem
> | TLS_CERT        /home/dieter/certs/dkluenter.pem
> | TLS_KEY         /home/dieter/certs/dkluenter-key.pem
> | TLS_CIPHER_SUITE        HIGH
> | TLS_REQCERT     demand
> `----
>
> ,----[ cn=config.ldif ]
> | olcTLSCACertificateFile: /etc/openldap/certs/avciCA.pem
> | olcTLSCertificateFile: /etc/openldap/certs/magenta.pem
> | olcTLSCertificateKeyFile: /etc/openldap/certs/magenta-key.pem
> | olcTLSCipherSuite: HIGH:MEDIUM
> | olcTLSVerifyClient: demand
> `----

Still works for me. Have your certificates expired?
--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/