Is there a way to configure OpenLDAP SLAPD (Linux) syncrepl consumer to always use a TLS based secured connection to it's master provider? The documentation does cover the -Z and-ZZ options as well as the ldap_start_tls_s but I have not been able to make these work from within the SLAPD.conf or LDAP.conf.
The docs cover this too...
http://www.openldap.org/software/man.cgi?query=slapd.conf&apropos=0&...
syncrepl [starttls=yes|critical]
"The starttls parameter specifies use of the StartTLS extended operation to establish a TLS session before Binding to the provider. If the StartTLS request fails and the critical argument was used, the session will be aborted."
On Wed, 17 Oct 2007, Chad Griewahn wrote:
Is there a way to configure OpenLDAP SLAPD (Linux) syncrepl consumer to always use a TLS based secured connection to it's master provider? The documentation does cover the -Z and-ZZ options as well as the ldap_start_tls_s but I have not been able to make these work from within the SLAPD.conf or LDAP.conf.
openldap-software@openldap.org
-
Aaron Richton -
Chad Griewahn