On 04/10/11 09:22 -0700, Howard Chu wrote:
Dan White wrote:
>On 03/10/11 21:43 +0200, Andreas Rudat wrote:
>>Am 03.10.2011 20:51, schrieb Dan White:
>>>On 03/10/11 19:41 +0200, Andreas Rudat wrote:
>>>My mail client may have corrupted this part of your configuration. You'll
>>>of course need valid entries here.
>>These options are defaults in my conf. With some comments, after
>>installing the slapd package
>You'll need to create a (client) certificate and populate those two values,
>or otherwise find a way to specify them while performing your ldapsearch
>I don't see how you will will be able to obtain SASL EXTERNAL over STARTTLS
How did this conversation get to STARTTLS? The Subject is asking
about SASL EXTERNAL over ldapi, which does not need TLS.
I was led down that path via the howto referenced in the original post, and
made several, possibly incorrect, assumptions about what the end goal is.