Alberto Lopes wrote:
> 
> From what I understood from the LDAPUserFolder code, it delegates the
> SSL negotiation to the python-ldap library.

And further down the delegation path:
python-ldap -> OpenLDAP lib -> OpenSSL lib

> How can I pass the
> CAcertificate to the python-ldap layer in order to have it accepting the
> server certificate?

See Demo/initialize.py in python-ldap's source distribution.

ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,'/etc/httpd/ssl.crt/myCA-cacerts.pem')

or

ldap.set_option(ldap.OPT_X_TLS_CACERTDIR,'/etc/httpd/ssl.crt')

In older versions of the OpenLDAP libs you can only set these options
globally. Not sure about 2.4.8.

I have no clue whether LDAPUserFolder makes it possible to set these
options though.

Ciao, Michael.

------------------------------------------------------------------------------
SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, Nevada.
The future of the web can't happen without you.  Join us at MIX09 to help
pave the way to the Next Web now. Learn more and register at
http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009.visitmix.com/
_______________________________________________
Python-LDAP-dev mailing list
Python-LDAP-dev@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/python-ldap-dev

Reply via email to