Re: TLS issue with SLES11

[Marc Patermann <hans.moser@ofd-z.niedersachsen.de>]

Hi,

pradyumna dash schrieb am 27.08.2011 12:23 Uhr:

> I want to achieve ldaps, that means all the communication should use 636 
> port, i have changed the parameters in the /etc/openldap/sysconfig file, 
> but no luck.
I don't understand what you want, either.
As you wrote "netstat .lnap |grep ldap it shows both 636 and 389 port 
listtening" and "ldapsearch -x -H ldaps://hostname, its also showing me 
the ldap contents" which is what you wand: ldaps.

If you do not like to open port 389 - what you did not write - you 
should check /etc/sysconfig/openldap:

# If set to "no" the LDAP server will not accept any "normal" LDAP 
connections
# but just connections over "ldaps" or "ldapi". Setting this to "no" 
does only
# make sense when either OPENLDAP_START_LDAPS or OPENLDAP_START_LDAPI is set
# "yes".
#
OPENLDAP_START_LDAP="yes"


Marc