Re: Debugging TLS negotiation failure

On Tue, May 16, 2023 at 03:18:18PM +0000, Lemons, Terry wrote:

3. Remove the existing slapd configuration:

rm /usr/local/etc/slapd.d/*

[...]

5. Re-create the openldap environment, using the updated slapd.ldif

/usr/local/sbin/slapadd -n 0 -F /usr/local/etc/slapd.d -l /usr/local/etc/openldap/slapd.ldif

I found use of ldapmodify to be problematic regarding authentication, so opted to just delete the current configuration and replace it.

If server is stopped, you can always use slapmodify to edit the current configuration in-place instead of a wipe/reimport.

Regards,