Joshua Schaeffer wrote:
Michael Ströder wrote:Simply use LDAPS (on separate port). It was never defined in a standard but most LDAP-enabled software supports it.I did ended up doing this. I had an application that didn't support start_tls on an ldap URI, but did support ldaps (or at least I couldn't find a way to get it to issue start_tls).
In OpenLDAP's libldap just use a URL extension: ldap://host/????starttls -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/