Re: [Samba] TLS between winbind and openldap

2013-08-07 Thread thierry DeTheGeek
Hi No, I did not try LDAPS because it is deprecated. That's why I tried StartTLS. I had far more headaches when searching for idmap related configuration. I found a working workaround before you answer me, which seems to be working (see my previous message). However, I'd rather not use

Re: [Samba] TLS between winbind and openldap

2013-08-06 Thread thierry DeTheGeek
Hi, I found a possible workaround to my issue myself. It seems to be working. After reading one more time about ldap.conf I tried to export environment variables to set my private key and my certificate. This seems to be working on both debian 6 and debian 7: I dommented out TLS_KEY and

Re: [Samba] TLS between winbind and openldap

2013-08-06 Thread Gaiseric Vandal
Did you try using LDAPS (ldap over SSL, typically on port 636.) I can't speak specifically about it with winbind BUT I have found that in other situations LDAPS creates less headaches with CA cert issues. On 08/06/13 05:27, thierry DeTheGeek wrote: Hi, I found a possible workaround to