[Samba] How to samba ldap and ssl

John G. Heim jheim at math.wisc.edu
Fri Aug 5 09:15:36 MDT 2011

From: "Ander Punnar" <ander.punnar at gmail.com>
To: <samba at lists.samba.org>
> When you are trying to do syncrepl with startls or ldaps://
> between 2 Debian boxes and use self-signed certs, then it doesn't work.
> When you are using LDAP-client compiled with

Instead of self-signed certs, I use certs from cacert.org. Its kind of a 
hassle to get signed up but once you do, you can generate all the certs you 
need for free. And the root cert and class-3 cert for cacert.org are in the 
ca-certificates debian package so it works right out of the box.

More information about the samba mailing list