Configuring OpenLDAP with SSL/TLS Support

[GRodriguez]

This really helped me in my advanced linux class last year. Thank you so much

[tracer]

What is the final ldapsearch line?  It cut off before showing that.

[thanhtaduy]

Dear Rajesh,
Your video stops just after the ldap server has been restarted. Could you tell me if the setup is finished or is there some configurations that I have missed ? Thx

[tofoo_ninja]

thanks! helped me a lot!
keep on doing if you have the time!

[srikanthbhaee]

Hi Rajnesh i need some help from u i need RHDS over view & how does it work can you help in that.

[raghavendrautube]

Hi, can you help me in how to replace new certs with openldap, unable to replace attributes with new files, do you have any better options here - thanks in advance

[rotaregi]

Dear Rajesh,
I have been following the LDAP videos and trying to setup the server. Kerberos authentication works fine, but I am unable to setup TLS authentication. Following the steps in the this video where I get a different output is after I do a ldapmodify on the tls.ldif file. Unlike the output you get on ldapsearch, I am getting this
modifying entry "cn=config"

olcTLSCRLCheck: none
olcTLSVerifyClient: never
olcTLSCACertificateFile: /etc/openldap/ca.crt
its not getting ldap1.crt and key.

[SK-luci]

can we create this with self signed certificates..??

[avinashkumarable]

Hi am getting an error msg like this
modifying entry "cn=config"
ldap_modify: Inappropriate matching (18)
additional info: modify/add: olcTLSCertificateFile: no equality matching rule

[avinashkumarable]

Help out Rajnesh
am rambling with this tls
ldapmodify: invalid format (line 11) entry: "cn=config"
now a differnt error

[avinashkumarable]

When i do ldap search on TLS i can see only CAcertificate file but my server crt & key file is displaying instead of that its showing the default values :(

[rsiwal]

Will create a Video on Certificate Server soo.

[rotaregi]

Dear Rajnesh,
I have emailed you the ldif and the output files.
Regards.

[rsiwal]

Please view the following video to create the CA:

[rsiwal]

OK. Call me on skype rajnesh.siwal at 8PM IST.