Re: LDAP over SSL ( ldaps )

[Abdelkader Chelouah <a.chelouah@gmail.com>]

On 18/08/2015 16:05, Aneela Saleem wrote:

I have no slapd.conf. I have cn=conf

On Tue, Aug 18, 2015 at 6:54 PM, Abdelkader Chelouah <a.chelouah@gmail.com> wrote:

On 18/08/2015 15:51, Aneela Saleem wrote:

Thanks Michael and Abdelkader.

Abdelkaded the link you provided is for slapd.conf distribution. Can you please guide me how to do "cn=config" distribution?

On Tue, Aug 18, 2015 at 6:45 PM, Abdelkader Chelouah <a.chelouah@gmail.com> wrote:

On 18/08/2015 15:41, Michael Ströder wrote:

Aneela Saleem wrote:

Can anyone please provide me some link for enabling "ldaps"

http://www.openldap.org/doc/admin24/tls.html

Ciao, Michael.

or http://www.openldap.org/faq/data/cache/185.html

regards

You can convert a slapd.conf to cn=config using slaptest

slaptest -f path/to/slapd.conf -F path/to/slapd.d

# cn=config
dn: cn=config
objectClass: olcGlobal
cn: config
...
olcTLSCACertificateFile: /path/to/cacert
olcTLSCertificateFile: /path/to/cert
olcTLSCertificateKeyFile: /path/to/key
olcTLSCipherSuite: HIGH:MEDIUM:!SSLv3:!SSLv2
...