[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Syncrepl SSL fail

To: openldap-technical@openldap.org
Subject: Re: Syncrepl SSL fail
From: Josh Miller <joshua@itsecureadmin.com>
Date: Thu, 13 Oct 2011 10:43:55 -0700
In-reply-to: <53616BF91B701EAFA5521B0F@[192.168.1.23]>
References: <CAAoQnKjisqdHa0Pa8u5fjsUeNvJwY_fi6uJvs_T5U30ao+TG2w@mail.gmail.com> <53616BF91B701EAFA5521B0F@[192.168.1.23]>

On Oct 13, 2011, at 10:29 AM, Quanah Gibson-Mount wrote:
> 
> I don't see any of the tls_* options to the syncrepl configuration here. Likely the syncrepl client is unable to verify the master's cert.  I would note that using refreshOnly is ill-advised.

Hi Quanah,

Why is RefreshOnly ill-advised?  That is the recommendation in the docs (very timely as I just set this up again myself).

re:  http://www.openldap.org/doc/admin24/replication.html

Thanks!

Josh Miller
Open Source Solutions Architect
(425) 737-2590
http://itsecureadmin.com/

Follow-Ups:
- Re: Syncrepl SSL fail
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

References:
- Syncrepl SSL fail
  - From: Hugo Deprez <hugo.deprez@gmail.com>
- Re: Syncrepl SSL fail
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

Prev by Date: adding monitor to cn=config on already running slapd
Next by Date: SCRAM-SHA-1
Index(es):
- Chronological
- Thread