Package: nslcd
Version: 0.7.15+squeeze1

In DNS, I have SRV records such as

_ldap._tcp.example.org.  IN SRV  0 0 636 ldap-host1.example.org.

Notice that it is actually an SSL listener (on port 636).  They are not
listed as _ldaps SRV records because ldapsearch (which relies on
libldap) doesn't seem to look at the _ldaps record at all, it just looks
at the URI scheme

In /etc/nslcd.conf, I set:

uri DNS

and I found that I have to explicitly set:

ssl on

as well, or it won't work

Now it is working, but on startup, I get this error:

nslcd: ldap://ldap-host1.example.org:636 doesn't start with ldaps:// and
"ssl on" is specified

Despite the startup error, nslcd appears to be working fine with the TLS
servers and SRV records.





-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to