On Wed, Feb 05, 2025 at 12:22:33PM -0000, Fred N wrote: > What is the correct configuration to set for my use? > why doesn't my proxy (as client) send his certificate?
Use the 'tls' directive and put the configuration (what you have in idassert-bind) there. You really want to read the manpage I pointed you to earlier... As for authz-regexp, no idea how you prepare the certificates' DNs and if they map to anything in the DIT (DB) or its ACLs. So first you'll have to decide how you want things to work in principle. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP
