[Bug 217159] Re: slapd + gnutls fails

2008-04-15 Thread svimes
... but TLS_REQCERT never in the client confs helps, but makes me wonder: $ man ldap.conf TLS_REQCERT never The client will not request or check any server certificate. This probably should not be the case. Previously has worked, which is still a bit dubious. allow The server certifica

[Bug 217159] Re: slapd + gnutls fails

2008-04-15 Thread svimes
That was the first thing I stumbled upon, so I don't think it's that. Slapd won't start if it can't read the pki files. I've adjusted the apparmor profile as follows: $ cat usr.sbin.slapd # vim:syntax=apparmor # Last Modified: Fri Jan 4 15:18:13 2008 # Author: Jamie Strandboge <[EMAIL PROTECTED

[Bug 217159] Re: slapd + gnutls fails

2008-04-14 Thread svimes
Why is the source package openldap2.3 although slapd version is 2.4.7? -- slapd + gnutls fails https://bugs.launchpad.net/bugs/217159 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap2.3 in ubuntu. -- Ubuntu-server-bugs mailing l

[Bug 217159] Re: slapd + gnutls fails

2008-04-14 Thread svimes
cannot choose slapd for some reason for this bug report. :/ -- slapd + gnutls fails https://bugs.launchpad.net/bugs/217159 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap2.3 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-

[Bug 217159] [NEW] slapd + gnutls fails

2008-04-14 Thread svimes
Public bug reported: Binary package hint: slapd = SLAPD + GnuTLS fails = ldaps connections require a client cert although it has been disabled from the slapd.conf. == client-side == {{{ $ ldapsearch -x ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) }}} == server-side == {{{ connectio