10 messages in org.openldap.openldap-softwareRe: multiple servers in DNS and TLS
FromSent OnAttachments
Emmanuel DreyfusJul 16, 2007 6:04 am 
Quanah Gibson-MountJul 16, 2007 8:13 am 
Emmanuel DreyfusJul 17, 2007 2:49 pm 
Emmanuel DreyfusJul 17, 2007 2:58 pm 
Dieter KluenterJul 17, 2007 8:15 pm 
Emmanuel DreyfusJul 17, 2007 9:44 pm 
Philip GuentherJul 17, 2007 11:07 pm 
Howard ChuJul 18, 2007 3:00 am 
Emmanuel DreyfusJul 18, 2007 5:30 am 
Howard ChuJul 18, 2007 8:34 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: multiple servers in DNS and TLSActions...
From:Quanah Gibson-Mount (qua@zimbra.com)
Date:Jul 16, 2007 8:13:49 am
List:org.openldap.openldap-software

--On Monday, July 16, 2007 3:04 PM +0200 Emmanuel Dreyfus <ma@netbsd.org> wrote:

Hi

I hope this is not covered in a FAQ (I searched without success): how do I configure clients to query multiple LDAP servers while using TLS?

Listing the servers in ldap.conf's URI works, but I'd prefer to have the server list stored in DNS, as it would allow adding a server without the need to change all clients configuration.

Having a rotative DNS for ldap.example.net cause the TLS checks to fail.

And OpenLDAP client library does not perform DNS SRV lookups.

OpenLDAP 2.4 will (just to note)

Is there some kind of trick to get this done properly?

Use a cert with a correct subjectAltName, or a wildcard cert.

--Quanah

-- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc

-------------------- Zimbra :: the leader in open source messaging and collaboration