On 01/26/2017 03:16 PM, John McKee wrote: > @Mark Reynolds > > ldapsearch -Z -h localhost -x -b dc=XX,dc=XX,dc=com uid=XXXX -d1 What about: ldapsearch -ZZ -h localhost -x -b dc=XX,dc=XX,dc=com uid=XXXX -d1 And what about: ldapsearch -H \"ldaps://localhost:636" -x -b dc=XX,dc=XX,dc=com uid=XXXX -d1 Did you set the cert dir in /etc/openldap/ldap.conf TLS_CACERTDIR=<to certificate directory> example: TLS_CACERTDIR=/etc/dirsrv/slapd-INSTANCE Regards, Mark > > Which gave the output mentioned above. > _______________________________________________ > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx