On Tue, Feb 04, 2025 at 04:06:42PM -0000, Fred N wrote: > My proxy is an intermediary between the client and the backend. It is the one > that must send its certificate. > I tried using an LDAPRC file in the current LDAP directory (/etc/openldap).
Ok, then double check you have set up your database correctly, use the `tls` configuration option (see man slapd-ldap). I assume you either move the TLS-related options from `idassert-bind` here or duplicate them in both places, not sure which, especially not when it comes to 2.4. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
