Centaur - OpenLDAP configuration

If you are connecting to Centaur from a Unix system then you are probably using the OpenLDAP library. OpenLDAP provides LDAP functionality to a range of languages such as PHP, Perl, Ruby and applications like Apache mod_ldap.

During the process of establishing a secure SSL/TLS connection to Centaur, the OpenLDAP client will attempt to verify the authenticity of the certificate presented by the server. To configure your client to successfully connect to Centaur you will need to perform the following steps. These details are correct for Redhat EL4 but the paths may vary for other Unix variants:

1. Install the Centaur CACert in the directory /etc/openldap/cacerts
2. Set the following options in the file /etc/openldap/ldap.conf
   

   TLS_REQCERT demand
   TLS_CACERTDIR /etc/openldap/cacerts

If you experience problems with certificate verification then you can disable it with the following option in /etc/openldap/ldap.conf:

TLS_REQCERT never