Some TDGSS protection properties perform similar functions to OpenLdap tunables. Always use the TDGSS values instead of OpenLdap tunable settings, to avoid unexpected results.
| TDGSS LDAP Protection Property | OpenLdap Tunable |
|---|---|
| LdapClientTlsCACert | TLS_CACERT |
| LdapClientTlsCACertDir | TLS_CACERTDIR |
| LdapClientTlsCert | TLS_CERT |
| LdapClientTlsCipherSuite | TLS_CIPHER_SUITE |
| LdapClientTlsCRLCheck | TLS_CRLCHECK |
| LdapClientTlsKey | TLS_KEY |
| LdapClientTlsRandFile | TLS_RANDFILE |
| LdapClientTlsReqCert | TLS_REQCERT |