Commit 27dd7a53 authored by Howard Chu's avatar Howard Chu
Browse files

syncrepl inherits default TLS settings from main slapd config

parent 1cc1f9b1
......@@ -1781,11 +1781,9 @@ parameter specifies use of the StartTLS extended operation
to establish a TLS session before Binding to the provider. If the
.B critical
argument is supplied, the session will be aborted if the StartTLS request
fails. Otherwise the syncrepl session continues without TLS. Note that the
main slapd TLS settings are not used by the syncrepl engine;
by default the TLS parameters from ETCDIR/ldap.conf will be used.
TLS settings may be specified here, in which case the ldap.conf settings
will be completely ignored.
fails. Otherwise the syncrepl session continues without TLS. The
tls_reqcert setting defaults to "demand" and the other TLS settings
default to the same as the main slapd TLS settings.
Rather than replicating whole entries, the consumer can query logs of
data modifications. This mode of operation is referred to as \fIdelta
......
......@@ -1689,11 +1689,9 @@ parameter specifies use of the StartTLS extended operation
to establish a TLS session before Binding to the provider. If the
.B critical
argument is supplied, the session will be aborted if the StartTLS request
fails. Otherwise the syncrepl session continues without TLS. Note that the
main slapd TLS settings are not used by the syncrepl engine;
by default the TLS parameters from ETCDIR/ldap.conf will be used.
TLS settings may be specified here, in which case the ldap.conf settings
will be completely ignored.
fails. Otherwise the syncrepl session continues without TLS. The
tls_reqcert setting defaults to "demand" and the other TLS settings
default to the same as the main slapd TLS settings.
Rather than replicating whole entries, the consumer can query logs of
data modifications. This mode of operation is referred to as \fIdelta
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment