[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Problem with TLS and multiple servers in URI



Kurt D. Zeilenga wrote:

At 01:05 PM 9/23/2004, Johan Andersson wrote:
From what I can see, slapd stops to negotiate TLS when more than one server is specified in ldap.conf. If I start slapd when there only is one server specified in ldap.conf, and then add the


second server when slapd is running, TLS suddenly works, and the client can reach both servers!



slapd(8) server functions doesn't rely on ldap.conf(5) for its
configuration. ldap.conf(5) is for configuring client functions
of LDAP clients such as ldapsearch(1).




So I thought too, until I found out I can get it to work by doing:
1.   Edit ldap.conf to only include one server in the URI string.
2.   Start slapd.
3.   Edit ldap.conf to include both servers in the URI string.
4.   Run ldapsearch.

So slapd must be doing something with ldap.conf.

Someone suggested to use HOST instead of URI. I tried that, but with the
same result.

/Johan Andersson