Lukas Slebodnik wrote:
On (02/12/16 15:31), Michael Ströder wrote:
> On the LDAP replicas themselves I'd like to use ldapi:// [1] in parameter
> ldap_uri to use the local slapd as primary server and point to the other
> replicas in ldap_backup_uri.
>
> Example:
>
> ldap_uri = ldapi://%2Fusr%2Flocal%2Fopenldap%2Fvar%2Frun%2Fldapi
What about using ldap://localhost?
You woula achieve the goal "to use the local slapd as primary server and point
to the other replicas in ldap_backup_uri"
Yes, that would be possible too (although I'd prefer to avoid the TCP overhead too).
Is ldap://localhost without StartTLS considered a secure connection?
In other words: Does password checking via simple bind work?
Ciao, Michael.