[Freeipa-devel] ipa-client-install and TLS

[W. Michael Petullo]

I just upgraded to FreeIPA 1.0. Last time I configured my test client
by hand, but this time I used ipa-client-install. I found that
ipa-client-install did not configure nss_ldap to use TLS in
/etc/ldap.conf*

It wrote this:

uri ldap://ipa.example.com

where I would expect this:

uri ldaps://ipa.example.com:636

Is there a reason ipa-client-install does not configure nss_ldap to use
TLS by default?

-- 
Mike

:wq