On Mon, 2 Aug 2010, Patrik Martinsson wrote:
ldap_tls_reqcert = demand
ldap_tls_cacert = /etc/openldap/cacerts/CADOUBLE.cer
ldap_tls_cacertdir = /etc/openldap/cacerts
I guess this doesn't work with GSSAPI SASL binding yet? Tried to force the
authid to FOO$@REALM, but it fails just the same.
it's harder to automatically generate certificates for the clients, that's
why I'm interested in getting this working :)
--
Timo Aaltonen
Systems Specialist, Aalto IT