(no subject)

[Pedro Fernandes Macedo]

I tried changing this option in /etc/ldap.conf and /etc/openldap/ldap.conf and it didnt work. I copied the cert to /etc/openldap/certs/cacert.pem and added "TLS_CACERT /etc/openldap/certs/cacert.pem" to both files. ldapsearch -H ldaps://ldaps.mydomain.com -x doesnt work (also using -h isnt working , but I still can log in and finger all users..)
Any more ideas? I've used the redhat-config-authentication tool to configure the client (copying the old config files used in redhat 9 didnt work also)...
--------------------
Pedro Fernandes Macedo
webmaster at margo.bijoux.nom.br


Message: 21
From: "Jason Montleon" <monty19 at hotmail.com>
To: <fedora-list at redhat.com>
Subject: Re: LDAPS authentication
Date: Thu, 11 Dec 2003 08:59:26 -0500
Reply-To: fedora-list at redhat.com

Is the LDAP server using a self-signed SSL certificate?

If so you need to export the CA Cert (Base64 format works for sure), and
copy it to your Linux PC.  Then you need to enter a line in your ldap.conf
that looks something like this:

TLS_CACERT /path/to/exportfile