Re: TLS still works not proper.

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 02:33 AM 6/30/2004, Oliver Hoffmann wrote:
>The extra Z changed nothing. It's still the same output.
>The HOWTO sais:
>"The single "-Z" flag tries to enable TLS and will proceed without using 
>encrypted connections if the TLS handshake fails."

That wording is misleading (I suggest you report that to the
author).  See the ldapsearch(1) description of -Z v. -ZZ.

>That confuses me. If TLS fails it should show me the same result I can see 
>with the normal search command, shouldn't it? 

You confuse failure of the LDAP Start TLS operation and
failure within TLS.

Kurt