TLS/SSL & load-balanced servers

[Quanah Gibson-Mount <quanah@stanford.edu>]

Hello,

I just ran into an interesting issue using TLS connections & load-balanced 
servers.  Basically, each of our servers has its own cert 
(ldap#.stanford.edu).  If I perform a search against the load-balanced name 
(ldap.stanford.edu), ldapsearch fails, noting that the names don't match. 
Is there an easy fix for this, or do I need to get an "ldap.stanford.edu" 
cert that each of the servers uses?  And, will that even work inside 
OpenLDAP?

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html