--On Friday, July 20, 2012 10:06 PM +0000 openldap@stormcloud9.net wrote:

I have also tried tls_reqcert=allow with the same result. And in a desperate attempt, I also tried setting tls_cacert=/dev/null in the hope that if it couldn't verify the cert it wouldnt check the hostname against the cert subject, but this failed as well.

Which of the three TLS software packages is your openldap build linked to?

OpenSSL MozNSS GnuTLS

Thanks, Quanah

--

Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration