I'm having trouble with adding a 2nd LDAP server into the client configuration. If I configure the client to use just either one, it works fine. So I'm sure both CA certificates work.
I have tried using TLS_CACERT option in both
/etc/openldap/ldap.conf, but it doesn't work. I get this error when I do an ldapsearch.
This is what I have currently configured.
uri ldaps://ldap.abc.com:636/ ssl no tls_cacertdir /etc/openldap/cacerts pam_password md5
The CA certificate in
/etc/openldap/cacerts has been hashed by using openssl. I also tried adding a 2nd hash sym link with .1 at the end but no luck.