On Tue, Feb 23, 2016 at 11:31:12AM +0100, Thomas Stather wrote:
... Tue Feb 23 11:23:13 2016 : Info: rlm_ldap: libldap vendor: OpenLDAP, version: 20439 Tue Feb 23 11:23:13 2016 : Info: TLS section "tls" missing, trying to use legacy configuration ...
However, i have the "tls" section in my /mods-enabled/ldap config file:
tls { start_tls = yes ca_file = /etc/ssl/certs/ca-bundle.pem require_cert = "demand" }
That's inside the ldap{} section? I'd guess either misplaced curly brackets somewhere or you're editing the wrong mods-enabled/ldap config file. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>