Joshua Schaeffer wrote:
Michael Ströder wrote:
Simply use LDAPS (on separate port). It was never defined in a standard but most LDAP-enabled software supports it.
I did ended up doing this. I had an application that didn't support start_tls on an ldap URI, but did support ldaps (or at least I couldn't find a way to get it to issue start_tls).
In OpenLDAP's libldap just use a URL extension:
ldap://host/????starttls