From 3955df151db2c1b093d02a3e06af01a3d985ce58 Mon Sep 17 00:00:00 2001
From: Graham Leggett
SSL support requires that
SSL/TLS support is dependant on which LDAP toolkit has been + linked to APR. As of this writing, APR-util supports: + OpenLDAP SDK (2.x or later), + Novell LDAP + SDK, + Mozilla LDAP SDK, native Solaris LDAP SDK (Mozilla based), + native Microsoft LDAP SDK, or the + iPlanet + (Netscape) SDK. See the APR + website for details.
@@ -299,12 +304,12 @@ by other LDAP modulesNote: Client certificates are specified globally rather than per connection, and so must be specified with the LDAPTrustedGlobalCert directive as below. Trying to set client certificates via the - LDAPTrustedClientCert directive will cause an error to be thrown - when httpd starts up.
+ LDAPTrustedClientCert directive will cause an error to be logged + when an attempt is made to connect to the LDAP server..The SDK supports both SSL and STARTTLS, set using the LDAPTrustedMode parameter. If an ldaps:// URL is specified, - SSL mode is forced.
+ SSL mode is forced, override this directive.