On Tue, 9 Sep 2008, Mathieu MILLET wrote: ... > But after the "first replication", the cn=config of the 2nd now contains > the TLSCertificateFile and TLSCertificateKeyFile of the 1st server, which > is point less. The 2nd server can't now start, because it can't find its > certificate (and key), which is normal ... > > Is it possible to specify "multiple" certificates in the cn=config file ?
Not that I know of, but it's easy enough to use a common path for each option (say /etc/openldap/server.crt and /etc/openldap/server.key) and then make those symlinks to the correct files for the local server. Philip Guenther