Re: LDAP over SSL ( ldaps )

On 18/08/2015 16:05, Aneela Saleem wrote:

I have no slapd.conf. I have cn=conf

On Tue, Aug 18, 2015 at 6:54 PM, Abdelkader Chelouah <a.chelouah@gmail.com mailto:a.chelouah@gmail.com> wrote:

On 18/08/2015 15:51, Aneela Saleem wrote:

...

Thanks Michael and Abdelkader.

Abdelkaded the link you provided is for slapd.conf distribution.
Can you please guide me how to do "cn=config" distribution?

On Tue, Aug 18, 2015 at 6:45 PM, Abdelkader Chelouah
<a.chelouah@gmail.com <mailto:a.chelouah@gmail.com>> wrote:

    On 18/08/2015 15:41, Michael Ströder wrote:

        Aneela Saleem wrote:

            Can anyone please provide me some link for enabling
            "ldaps"

        http://www.openldap.org/doc/admin24/tls.html

        Ciao, Michael.

    or http://www.openldap.org/faq/data/cache/185.html

    regards

You can convert a slapd.conf to cn=config using slaptest

slaptest -f path/to/slapd.conf -F path/to/slapd.d

# cn=config dn: cn=config objectClass: olcGlobal cn: config ... olcTLSCACertificateFile: /path/to/cacert olcTLSCertificateFile: /path/to/cert olcTLSCertificateKeyFile: /path/to/key olcTLSCipherSuite: HIGH:MEDIUM:!SSLv3:!SSLv2 ...