On Wed, 30 Apr 2014, Andrew D. Arenson wrote:
To my chagrin, I have rechecked and found that using
LDAPTLS_REQCERT actually works, despite my reporting above that it
Heh. PEBCAK strikes again.
Strangely, however, setting TLS_REQCERT in ~/.ldaprc does _NOT_
seem to work. Does that work for you?
Yes, it does.
Thanks. I have 2.4.23-34 installed. What other detail might be
ls -l ~/.ldaprc # to verify perms
cat -vet ~/.ldaprc # to verify contents, line-endings
strace -e trace=file ldapsearch .... # check for other random failures
(Obviously if your OS doesn't have strace, substitute the correct local
system call trace facility, be it truss, ktrace, or whatever.)