RE: ldapsearch TLS error

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of John Green

> Thanks for the input, but I modified the /etc/ldap.conf file to
> match my dn
> before I first started ldap on the machine. When I first got the error, I
> tried adjusting the TLS settings in the same file and still no
> luck. I think
> this is an issue with upgrading the OpenLDAP version on RH72 and somehow
> breaking the dependencies with OpenSSL.

I think you misunderstood my point. You need to set the default host, or the
default URI, to the fully qualified domain name of your server. I wasn't
talking about matching the DN, though obviously doing that makes things more
convenient.

Use either
	HOST	server.sub.domain
or
	URI	ldap://server.sub.domain

to set your default search host.

> But, on a brighter note, I think I will just stick with the
> version of RH's
> OpenLDAP rpm that I know works (2.0.11), and eventually get around to
> testing a more recent version.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support