Aleksander Adamowski wrote:
It seems that whenever certificate authentication is an allowed possibility on the FDS server side, OpenLDAP client tries using it even if it is operating inside an OpenLDAP server environment (in which case it supplies its server certificate as client's - thus the problem).
OpenLDAP client lib supplies the client cert which was configured for back-ldap. Check OpenLDAP's ldap.conf or slapd.conf and the relevant man-pages.
I think the problem is on OpenLDAP side (it shouldn't use its server certificate for client authentication when acting as an LDAP client).
I think the problem is with your particular configuration and the certs you're using.
Ciao, Michael. -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
