Patterns

For stunnel first import the highest cert into stunnel.pem:

.) individual key
.) individual cert
.) comodo cert

http://www.surf.org.uk/src/lcyrussasl.html

You may be asked to enter the passphrase IF you generated the RSA with a passphrase. If you do NOT want to be asked for a passphrase when restarting apache, re-generate your RSA key file.

[root@host /etc/httpd/conf/ssl.crt]# cd ../ssl.key
[root@host /etc/httpd/conf/ssl.key]# mv example.com.key example.com.key.has-passphrase
[root@host /etc/httpd/conf/ssl.key]# openssl rsa -in example.com.key.has-passphrase -out example.com.key

access to attrs=userPassword by dn.regex=”cn=admin,dc=example,dc=com” write by anonymous auth by sel
f write by * none

access to dn.base=”" by * read

access to * by dn.regex=”cn=admin,dc=example,dc=com” write by * none

Examples for searching an Active Directory server

ldapsearch -x -b 'OU=employees,DC=corp,DC=example,DC=com' 'objectclass=*' -D 'CN=ldaplookup,CN=Users,DC=corp,DC=example,DC=com' -w ldaplookup -h 192.168.1.1

ldapsearch -x -h adserver.example.com -D "cn=ldaplookup,cn=Users,dc=example,dc=com" -W "sAMAccountName=ldaplookup" -b "dc=example,dc=com"