Re: Using TLS connecting to a AD server. openldap2.4.42

[Michael Ströder <michael@stroeder.com>]

Quanah Gibson-Mount wrote:
> --On Friday, September 08, 2017 6:48 PM +0000 Don jessup
> <djessup72@yahoo.com> wrote:
>
>
> > int reqcert = LDAP_OPT_X_TLS_NEVER;
> > ldap_set_option (ld, LDAP_OPT_X_TLS_REQUIRE_CERT, &reqcert);
> >
> > Is there way to make this work programmatically without using
> > the ldap.conf?
>
> Yes.  The problem is the TLS options generally have to be set
> globally.

???

I thought you have to set LDAP_OPT_X_TLS_NEWCTX to 0 *after* 
setting all TLS-related options to let libldap reinitialize the 
client's SSL context. Doesn't that work as expected?

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature