--On Monday, February 04, 2013 8:04 PM +0100 Jason 
<jason.johnson....@gmail.com> wrote:

> Slapd instead of "slaps", and I forgot to mention this is all on the same
> Linux machine.
>
> Sent from my iPhone
>
> On Feb 4, 2013, at 8:03 PM, Jason <jason.johnson....@gmail.com> wrote:
>
>> I'm using the latest stable Debian. I use the DSPAM from the backports
>> repo since DSPAM isn't in stable. Ldapsearch works fine as does dovecot.
>>
>> As far as using the same libraries, I suspect slaps might be using a
>> different SSL library (gnutls vs OpenSSL) but I would hope that wouldn't
>> make a difference.

a) Even the debian openldap packagers recommend against using their 
packages for a production LDAP service
b) GnuTLS is known to be problematic
c) The Debian packages are ancient

Looking back over your config, I do see this:

ExtLookupCryptox  tls  # Sets the use of TLS on backend communication 
(only compatible with LDAPv3)

My guess is that this tells DSPAM to use "startTLS".  ldaps and startTLS 
are mutually exclusive.  Try commenting this line out.

--Quanah


--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_jan
_______________________________________________
Dspam-user mailing list
Dspam-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspam-user

Reply via email to