dhcp 4.3.2 with ldap backend

[Michael Ströder]

Kristof Van Doorsselaere wrote:
> Thanks for your reply.
>
> Our current dhcp server is a centos 5.5, the new server I’m setting up is a centos 7
>
> On this centos 7:
>
> - dhcp 4.2.8 with ldap backend = OK
> - dhcp 4.3.2 with ldap backend = NOK

IIRC libldap was linked against OpenSSL in CentOS/RHEL 5. In more recent 
versions it's linked against libnss because of Red Hat's 
PKCS#11-everywhere-plans. This is a significant change regarding TLS 
configuration.

=> first try to get your ldaps://ldaptest.example.com working with ldapsearch 
command-line tool

Also note that libldap reads a system-wide LDAP client configuration file 
which might falsely set additional TLS related parameters. See ldap.conf(5) 
for details, especially env var LDAPNOINIT and sections TLS OPTIONS and FILES.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4272 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.isc.org/pipermail/dhcp-users/attachments/20150508/3a1ef2ec/attachment.bin>