Forum Discussion
iaine
May 14, 2010Nacreous
We had a similar problem when we upgraded to 9.4.5 a couple of years a go. I don't know if it's still relevant for your version but these are steps that we followed that F5 support forwarded on.
Iain
1. The new openldap installation uses /usr/etc/openldap/ldap.conf as its config file by default. Also the new library requires certificate checking by default. In this ldap.conf file you need to add the line:
TLS_REQCERT never
NOTE: The cr I file will change the config file the openldap library uses back to /etc/ldap.conf to avoid changes in 2 following.
2. Unfortunately subdomain does not allow access to this newly formed ldap.conf file, you need to add this for it to work.
2a. Add the following line to /etc/subdomain.d/usr.bin.bigd:
/usr/etc/openldap/ldap.conf r,
2b. restart subdomain:
/etc/rc.d/init.d/subdomain restart