Re: TLS LDAP Configuration w/Linux 5.0

[Buchan Milne <bgmilne@staff.telkomsa.net>]

Please keep replies on-list.

On Thursday 21 February 2008 17:00:11 Mathis, Jim wrote:
> Buchan,
>
> Thanks for the info. I want to ensure when I create the certificates
> that I'm doing it correctly. As follows:
>
> LDAP Server IP: 192.168.10.1
> Host name: node01
> suffix: dc=S80,dc=com
>
> Do I create a Certificate Common Name using "node01.S80.com" or "node01"

You use the name that you are going to use to connect to the host with. The 
real fqdn does not matter ....

So, if you are going to use:

URI ldaps://www.microsoft.com

then create a cert for www.microsoft.com

(of course, you should ensure that the name you use resolves to the IP)

Regard,s
Buchan