I tried changing this option in /etc/ldap.conf and /etc/openldap/ldap.conf and it didnt work. I copied the cert to /etc/openldap/certs/cacert.pem and added "TLS_CACERT /etc/openldap/certs/cacert.pem" to both files. ldapsearch -H ldaps://ldaps.mydomain.com -x doesnt work (also using -h isnt working , but I still can log in and finger all users..) Any more ideas? I've used the redhat-config-authentication tool to configure the client (copying the old config files used in redhat 9 didnt work also)... -------------------- Pedro Fernandes Macedo webmaster@xxxxxxxxxxxxxxxxxxx Message: 21 From: "Jason Montleon" <monty19@xxxxxxxxxxx> To: <fedora-list@xxxxxxxxxx> Subject: Re: LDAPS authentication Date: Thu, 11 Dec 2003 08:59:26 -0500 Reply-To: fedora-list@xxxxxxxxxx Is the LDAP server using a self-signed SSL certificate? If so you need to export the CA Cert (Base64 format works for sure), and copy it to your Linux PC. Then you need to enter a line in your ldap.conf that looks something like this: TLS_CACERT /path/to/exportfile