Problem using ldaps with two different CA cert files

2008-09-10 Thread Rich Megginson
The following code does not work in a couple of different places: import sys import ldap, ldap.ldapobject ldap.set_option(ldap.OPT_DEBUG_LEVEL, 255) ldap.set_option(ldap.OPT_X_TLS_CACERTFILE, '/path/to/ca1.pem') conn1 = ldap.ldapobject.LDAPObject('ldaps://server1.domain:636')

Re: Problem using ldaps with two different CA cert files

2008-09-11 Thread Rich Megginson
Michael Ströder wrote: Rich Megginson wrote: Is it possible to use two different CA certs in a single python-ldap app? There are two options: 1. Stuff all trusted CA certs into one PEM file and use ldap.set_option(ldap.OPT_X_TLS_CACERTFILE, '/path/to/allcacerts.pem') 2. Copy

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-03 Thread Rich Megginson
On 02/03/2011 04:34 AM, Michael Wood wrote: Hi I'm trying to do a search against Samba 4's LDAP server and it works, but the bind and search are both successful, everything hangs when I try to unbind from the LDAP server. If anyone could enlighten me I would be grateful. I've run into the

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-04 Thread Rich Megginson
On 02/04/2011 09:15 AM, Michael Ströder wrote: Rich Megginson wrote: OpenLDAP 2.4.23 supports Mozilla NSS (triple licensed GPLv2+/LGPLv2+/MPL) for crypto Fedora 14 and later use this instead of OpenSSL I see some benefits using Mozilla NSS especially with LDAP clients. But I wonder whether

Re: python-ldap hanging for 15 minutes under certain conditions

2011-02-07 Thread Rich Megginson
On 02/05/2011 01:42 PM, Michael Wood wrote: Hi On 4 February 2011 17:35, Rich Megginsonrich.meggin...@gmail.com wrote: On 02/03/2011 11:59 PM, Michael Wood wrote: On 4 February 2011 08:32, James Andrewarthajam...@daa.com.auwrote: [...] Debian uses GnuTLS because OpenSSL has the non-GPL

Re: 2.4.0 patches need review

2011-03-02 Thread Rich Megginson
On 02/21/2011 02:29 PM, Michael Ströder wrote: HI! I've committed a larger patch contributed by Rich Megginson fixing SF#2829057 [1] and adding generic support LDAPv3 extended operations. Many thanks to him. I've done some tests for [1] by successfully using the LDAP persistent search