>>>>> "Brian" == Brian May <[EMAIL PROTECTED]> writes:

    Brian> on server:

    Brian> ldap-account-manager   ldap://localhost    BAD
    Brian> ldapsearch             ldap://localhost    OK
    Brian> ldapsearch             ldap://remotehost   OK
    Brian> ldapsearch             ldaps://remotehost  OK


    Brian> from another computer:

    Brian> ldapsearch             ldap://remotehost   OK
    Brian> ldapsearch             ldaps://remotehost  OK
    Brian> gq                     ldap://remotehost   OK
    Brian> gq                     ldaps://remotehost  BAD

    Brian> As far as I can tell, it doesn't matter if I authenticate or bind
    Brian> anonymously.

I just discovered something, ldap-account-manager is using
LDAP_START_TLS_OID.

gq really isn't using TLS for ldap://

So it would appear the triggers are:

* TLS connection.
* only particular users (not sure why).
* not ldapsearch.

Unfortunately, since it only happens with TLS, this may make finding
out more rather difficult.
-- 
Brian May <[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to