Am Mon, 13 Jan 2020 15:44:02 -0500 schrieb Peter Sui peters@qnext.com:
Hi Michael, 1. If I want to use Unix peer credentials, I just need to specify the url as ldapi://... , and still use ldapwhoami command like: ldapwhoami -H ldapi://example.com:389 -YEXTERNAL right ? 2. what If I want to use TLS client certs, except we set the certificate file in the .ldaprc, do we still run the same ldapwhoami command, like: ldapwhoami -H ldap://example.com:389 -YEXTERNAL or ldapwhoami -H ldap://example.com:389 -YEXTERNAL -Z
Thanks!
Peter
[...]
If authz-regexp is set correctly, it should be:
ldapwhoami -YEXTERNAL-H ldapi:///
-Dieter