On Tue, Feb 04, 2025 at 04:06:42PM -0000, Fred N wrote:
My proxy is an intermediary between the client and the backend. It is the one that must send its certificate. I tried using an LDAPRC file in the current LDAP directory (/etc/openldap).
Ok, then double check you have set up your database correctly, use the `tls` configuration option (see man slapd-ldap). I assume you either move the TLS-related options from `idassert-bind` here or duplicate them in both places, not sure which, especially not when it comes to 2.4.
Regards,