Hello,

I've finally got the SSL working. Thanks for all the help.
When I try to login with an imported account from OpenLDAP I get the message that my account is expired and that I need to change my LDAP password immediately.
When trying this I get an error

 # ssh jdtroy@ldapserver
jdtroy@ldapserver's password:
You are required to change your password immediately (password aged)
You are required to change your LDAP password immediately.
Last login: Fri Jan 13 14:38:12 2006 from ldapserver
WARNING: Your password has expired.
You must change your password now and login again!
Changing password for user jdtroy.
Enter login(LDAP) password:
New UNIX password:
Retype new UNIX password:
LDAP password information update failed: Can't contact LDAP server
Current passwd must be supplied by the user.

passwd: Permission denied
Connection to ldapserver closed.

In /var/log/messages I get  pam_ldap: ldap_extended_operation_s Unknow error


Any idea on what I'm doing wrong?

In /etc/ldap.conf I do have 
pam_lookup_policy yes
pam_password exop
pam_password md5
ssl on
ssl start_tls
tls_cacertfile /path/to/cacertfile

Thanks in advance,
Jo