[Fedora-directory-users] Hostname does not match CN....

[Alex aka Magobin]

Hi, 
After with your help, succesfully  configured replication between server
I take a look to configure client's authentication  through ldap
server...I have 2 question:

1) Is it possible add a user directly from fedora ds as posix user using
groups from server?..I don't know is groups is integrated with
system...is it possible to add server groups to Fedora DS groups?

2) Reading ssl howto I export CA certificate to client(fedora core5)
in /etc/openldap/cacerts....(some of steps in ssl howto are
automatically generated from fedora core 5 as installing in cacerts
directory in x509 mode) but when I try to check if ssl is enable the
answer is:

[root at test]# ldapsearch -x -ZZ '(uid=testuser)'
ldap_start_tls: Connect error (-11)
        additional info: TLS:hostname does not match CN in peer
certificate


How can I solve ?

Alex