https://bugs.openldap.org/show_bug.cgi?id=10323
--- Comment #2 from grichier@scaleway.com --- Seems related to olcBkLloadStartTLS ignore.
Using static config, starttls is working ... --------------------- listen "ldap://:1389" feature proxyauthz
TLSShareSlapdCTX true
bindconf bindmethod=simple network-timeout=5 binddn=* credentials=* tls_cacert="/etc/ldap/certs/cacert.pem" tls_cert="/etc/ldap/certs/cert.pem" tls_key="/etc/ldap/certs/private.key"
tier roundrobin backend-server uri=ldap://ldap01.example.com retry=5000 max-pending-ops=50 conn-max-pending=10 numconns=10 bindconns=5 starttls=critical backend-server uri=ldap://ldap02.example.com retry=5000 max-pending-ops=50 conn-max-pending=10 numconns=10 bindconns=5 starttls=critical