--On Friday, December 15, 2006 12:15 AM +0000 hyc@symas.com wrote:

Quanah Gibson-Mount wrote:

...

--On Wednesday, December 13, 2006 2:55 AM +0000 hyc@symas.com wrote:

...

Feel free to submit a patch. This may need to be two separate patches since there are several new TLS config keywords in RE24 vs RE23.

You might as well incorporate the ITS#4540 patch while you're at it.

Done, in both slapd.conf(5) and the admin guide.

...

I've made the following change to the 2.3 admin guide:

I'd probably put starttls a little lower on the list, but no big deal.

I'm going to leave it as is, as it matches slapd.conf(5).

The last two sentences are a little ambiguous to me. I would say

If the the StartTLS request fails and the {{EX:critical}} argument was used, the session will be aborted. Otherwise the syncrepl session continues without TLS.

Fixed in the admin guide, and slapd.conf(5), which is where I had grabbed the text from. ;)

--Quanah

-- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html