Hello,
My understanding is that FreeIPA is configured to accept connections on port 389 and the
StartTLS is configured.
I managed to connect to the IPA server by using ldapsearch -x and without -ZZ so, I
suppose the TLS is not enforced.
Is there any option force TLS connections only? Obviously, I would prefer something that
can be replicated and not to manually edit the configuration files, but I can live with
that :)