[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL Mech EXTERNAL disabled?

Dieter Kluenter wrote:

The update was from 2.4.17 to 2.4.18 build with openssl.

,----[ ldaprc ]
| BASE o=avci,c=de
| TLS_CACERT      /home/dieter/certs/avciCA.pem
| TLS_CERT        /home/dieter/certs/dkluenter.pem
| TLS_KEY         /home/dieter/certs/dkluenter-key.pem
| TLS_CIPHER_SUITE        HIGH
| TLS_REQCERT     demand
`----

,----[ cn=config.ldif ]
| olcTLSCACertificateFile: /etc/openldap/certs/avciCA.pem
| olcTLSCertificateFile: /etc/openldap/certs/magenta.pem
| olcTLSCertificateKeyFile: /etc/openldap/certs/magenta-key.pem
| olcTLSCipherSuite: HIGH:MEDIUM
| olcTLSVerifyClient: demand
`----


Still works for me. Have your certificates expired?
--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/