On Sun, Mar 23, 2014 at 09:32:22AM +0000, ck@cksoft.de wrote:

Hi,

I can confirm that openldap-2.4.39 still has in issue with this.

When connecting via TLS I tried to modify olcTLSVerifyClient from never to try with following ldif:

dn: cn=config changetype: modify replace: olcTLSVerifyClient olcTLSVerifyClient: try

this caused slapd to hang indefinetely.

I was able to successfully modify above when connecting without TLS.

I need to complete my current task but will set up a small proof of concept later on in my lab.

Hi Christian, have you been able to set up a test configuration that reproduces it with latest OpenLDAP? A cursory test here doesn't seem to do anything of the sort.

Thanks,