Windl, Ulrich wrote:
> Hi!
> 
> AFAIK ldapsearch does not use ldap.conf

> (and it seems you cannot specify certificates to authenticate as client using 
> ldapsearch).

Wrong. Re-read the ldap.conf(5) manpage. You must use an ldaprc file, not 
ldap.conf.

> Maybe you need to write a tool (or extend ldapsearch to accept additional 
> options for certificates)
> 
> Kind regards,
> Ulrich
> 
>> -----Original Message-----
>> From: Eric M <em.jo...@gmail.com>
>> Sent: Friday, December 27, 2024 3:17 PM
>> To: openldap-technical@openldap.org
>> Subject: [EXT] Re: LDAP Tools don't use LDAP.conf
>>
>> I just want to perform a ldapsearch search with TLS mutual authentication.
>> My backend require mutual authentication because the parameter
>> TLS_REQCERT is demanded.
>> On my client server, i configured my LDAP.conf with his TLS parameters.
>> An OpenSSL test is ok when I check and give all the certificate parameters in
>> command line.
>> But, with my search with ldapsearch, i notice an error « peer did not return
>> certificate » with LDAP.conf configured.


-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

Reply via email to