search for: tlsdhparamfil

...; include /etc/ldap/schema/cosine.schema >> include /etc/ldap/schema/nis.schema >> include /etc/ldap/schema/inetorgperson.schema >> include /etc/ldap/schema/misc.schema >> >> pidfile /var/run/slapd/slapd.pid >> argsfile /var/run/slapd/slapd.args >> >> TLSDHParamFile /etc/ssl/certs/dhparam.pem >> TLSCACertificateFile /etc/ssl/certs/ca.pem >> # Enable tls by providing the server cert >> TLSCertificateFile /etc/ssl/certs/<HOSTNAME>.crt >> TLSCertificateKeyFile /etc/ssl/private/<HOSTNAME>.key >> >> # loglevel 896 =...

Der Rowland, We share that concerns actually and of course if there is a way to avoid it, it is always better. Another fellow suggested us an LDAP-Proxy instead (personally have never setup one). What we actually need in our case scenario, is only that service and not the rest of bells and whistles of an RODC. I just was wondering if someone had experience with what happens if one does