Antwort: Re: SSL certificates, kerberos keytabs, and load balancing [Virus checked]

[denis.havlik@t-mobile.at]

>> cert (ldapX.stanford.edu).  If I use a different cert for the server
>> (ldap.stanford.edu), I get a host name mismatch.  So you'll have to
>> use hardware load balancing.  I plan to test that with Stanford's
>> directory servers in the future, but that is a future project. ;)

>To solve the host mismatch problem in certificates you may addionally
>use the attribute subjectAltName, i.e. 
>commonName=ldap1.example.com
>subjectAltName=commonName: ldap.example.com

Bingo!

thx
        Denis