--On October 15, 2011 5:10:24 PM +0300 Nick Milas nick@eurobjects.com wrote:

On 15/10/2011 2:30 μμ, Olivier Guillard wrote:

...

If you youldaps:// add this :

tls_reqcert=demand and add starttls=critical

In my installations, syncrepl doesn't work with these directives (although ldapsearch using ldaps: works fine).

startTLS and ldaps are two entirely different mechanisms, and do not work together. I.e., you cannot do startTLS to an ldaps:// URI.

--Quanah