I'm trying to add TLS support to my OpenLDAP instance and according to countless articles i'm supposed to add the following (ldif):
dn: cn=config
add: oclTLSCACertificateFile
olcTLSCACertificateFile: /etc/ldap/ssl/slapd.pem
-
dn: cn=config
add: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ldap/ssl/slapd.pem
-
dn: cn=config
add: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile /etc/ldap/ssl/privkey.pem
I can add the olcTLSCACertificateFile just fine. But not olcTLSCertificateFile or olcTLSCertificateKeyFile for that matter.
ldapmodify just gives me an Implementation specific error (80) which is useless. But ldapadd/slapadd gives me an Unknown attribute error.
So my I checked the schema
# ldapsearch -b cn=schema,cn=config
and sure enough all the olcTLS* attributes are there.
So what am i doing wrong here?