LDAP CONFIGURATION IN FreeRadius

[Alan Buxey]

Ummmm. Surely you want to use protection if its out in the cloud anyway??  

You can view connecting to ldap using eg netstat and tcpdump

However,  regarding the root CA for ldap. Its entirely different (or can be!) To that used by freeradius for clients (PEAP etc). So, grab the required root CA of the ldap server and is server cert and use those in your config.   PS ldap stuff is very much refreshed in v3 - many more options etc and a far better connection pool (could be ideal for WAN based ldap servers)

alan