Help with LDAPS health monitor v9.4.8

We had a similar problem when we upgraded to 9.4.5 a couple of years a go. I don't know if it's still relevant for your version but these are steps that we followed that F5 support forwarded on.

 

 

Iain

 

 

1. The new openldap installation uses /usr/etc/openldap/ldap.conf as its config file by default. Also the new library requires certificate checking by default. In this ldap.conf file you need to add the line:

 

TLS_REQCERT never

 

NOTE: The cr I file will change the config file the openldap library uses back to /etc/ldap.conf to avoid changes in 2 following.

 

2. Unfortunately subdomain does not allow access to this newly formed ldap.conf file, you need to add this for it to work.

 

2a. Add the following line to /etc/subdomain.d/usr.bin.bigd:

 

/usr/etc/openldap/ldap.conf r,

 

2b. restart subdomain:

 

/etc/rc.d/init.d/subdomain restart