The doc page gives the proper line as: OPTS="-h ldaps:// ldapi://%2fvar%2frun%2fopenldap%2fslapd.sock" Using this results in "ldap_bind: Can't contact LDAP server" The line with the correct punctuation is already in the file, commented out: OPTS="-h 'ldaps:// ldap:// ldapi://%2fvar%2frun%2fopenldap%2fslapd.sock'" Using this line results in a proper connection to the ldap server. The use of the single quotes is required to bind the entire space-separated list to the -h option. Reproducible: Always Steps to Reproduce: 1. 2. 3.
Thanks. I've added the quoting, but I left out the ldap:// entry. The main reason for this is that we don't want any queries happen in plain text over the network (especially not in this case where authentication is handled).