OpenBSD 4.0-current (GENERIC) #0: Tue Dec 12 11:04:40 MST 2006
   [EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
openldap-server-2.3.27p0

I start slapd as follows:

/usr/local/libexec/slapd -f /etc/openldap/slapd.conf -h ldap://127.0.0.1 \
ldaps://127.0.0.1 -u _openldap -g _openldap

I understand that this should start a TLS listener on port 636 but
that never happens:

$ netstat -na |egrep '(389|636)'
tcp        0      0  127.0.0.1.389          *.*                    LISTEN

...although STARTTLS over port 389 does seem to function correctly.

I have the following config lines in slapd.conf:

TLSCACertificateFile  /etc/openldap/certs/ca.crt
TLSCertificateFile    /etc/openldap/certs/server.crt
TLSCertificateKeyFile /etc/openldap/certs/server.key

...and:

$ ls -l /etc/openldap/certs/
total 16
-rw-r--r--  1 root  _openldap  2496 Nov 15  2005 ca.crt
-rw-r--r--  1 root  _openldap  2025 Nov 15  2005 server.crt
-rw-r-----  1 root  _openldap   887 Nov 15  2005 server.key

Is this likely to be a configuration problem or a bug upstream?

I've also tried to add '-d 255' to my startup arguments and slapd
nonetheless forks from the shell and outputs no debug info.

DS

Reply via email to