On 7/20/19 10:51 AM, Nikos Voutsinas wrote:
On Sat, Jul 20, 2019 at 11:28 AM Michael Ströder <michael@stroeder.com mailto:michael@stroeder.com> wrote: On 7/20/19 8:25 AM, Nikos Voutsinas wrote: > In the view of the new openldap release, I ran some tests by using the > current snapshot of the OPENLDAP_REL_ENG_2_4_48 tree Which snapshot? Really the latest 407ce9d prepared for release and with latest mdb merge? Yeap the one tagged for 2.4.48
Ok.
> The testing environment was a Debian (Stable/Buster) and > Openldap was compiled with the Debian's gnu TLS libs. Could you try to link with OpenSSL and test that to preclude that it's an issue with GnuTLS?Whenever it was a gnutls library issue, even the plain ldapsearch -H ldaps:// had problems. Now this is not the case, cmd line utils from the same build at the same remote ldaps:/// work.
There are changes in libldap and slapd-ldap related to TLS which might not work correctly with GnuTLS.
So could you try to first link with OpenSSL? If that works it would mean that the GnuTLS support needs some more work.
BTW: During the last days Quanah and me investigated an issue with a (now reverted) patch for libldap only occuring with dhcpd using libldap. ldapsearch and many other LDAP clients were working just fine.
Ciao, Michael.