[Samba] How to samba ldap and ssl

[John G. Heim]

From: "Ander Punnar" <ander.punnar at gmail.com>
To: <samba at lists.samba.org>
>
> When you are trying to do syncrepl with startls or ldaps://
> between 2 Debian boxes and use self-signed certs, then it doesn't work.
> When you are using LDAP-client compiled with

Instead of self-signed certs, I use certs from cacert.org. Its kind of a 
hassle to get signed up but once you do, you can generate all the certs you 
need for free. And the root cert and class-3 cert for cacert.org are in the 
ca-certificates debian package so it works right out of the box.