Re: OpenLDAP/SSL and SSL Trust Chain?

[Frank Swasey <Frank.Swasey@uvm.edu>]

Today at 11:42am, Paul Reilly wrote:

> configured for them to work. I can only assume then it will be the
> same for the ldap plugin in MacOSX diretcory services. I just need to
> find out where to configure a CA cert in it!

The file to edit is /etc/opeldap/ldap.conf on Mac OSX.  Add the 
TLS_CACERT entry there.

The CACERT file we use, is the cabundle.crt file shipped with redhat's 
openssl rpm.

-- 
Frank Swasey                    | http://www.uvm.edu/~fcs
Systems Programmer              | Always remember: You are UNIQUE,
University of Vermont           |    just like everyone else.
                    === God Bless Us All ===