Right now, I'm passing an ldaps:// URI to ldap_initialize. I'd like to be able to change the SSL/TLS options before initiating the connection. Is such a thing possible?
--- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |
Yes,
For example in sssd.conf you want to use "ldap_id_use_start_tls = true" or in java app use StartTlsRequest tlsr = new StartTlsRequest();..
S pozdravem / Best regards
Josef Dvořáček
From: openldap-technical [mailto:openldap-technical-bounces@openldap.org] On Behalf Of Scott Neugroschl Sent: Wednesday, November 26, 2014 5:28 PM To: openldap-technical@openldap.org Subject: Setting SSL/TLS options in client code?
Right now, I'm passing an ldaps:// URI to ldap_initialize. I'd like to be able to change the SSL/TLS options before initiating the connection. Is such a thing possible?
--- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |
Scott Neugroschl scott_n@xypro.com writes:
Right now, I'm passing an ldaps:// URI to ldap_initialize. I'd like to be able to change the SSL/TLS options before initiating the connection. Is such a thing possible?
Call ldap_set_option() after ldap_initialize() but before your first LDAP operation.
openldap-technical@openldap.org