Proxyagent using proxy tls:simple fails to bind to DS 6.3

Question

If I configure the profile to use proxy simple, it works fine everything works including authentication (/etc/pam.conf and the server are using pam_ldap:tls:simple). If I try proxy tls:simple, it fails to bind to the server. Both the server and client are Solaris 10. I generated and deployed the certificates on both sides. I searched Sunsolve and the forums. Is proxy tls:simple an unworkable combination? Proxy anonymous does not seem to work either.
Any ideas?

Answer 1

This is for my internal lab network. You will have to use ldapadd to add it to the DS configuration:
ldapclient genprofile -a profileName=tls-profile -a defaultSearchBase=dc=gallifrey,dc=net -a credentialLevel=proxy \
-a authenticationmethod=tls:simple -a serviceAuthenticationMethod=pam_ldap:tls:simple \
-a serviceAuthenticationMethod=passwd-cmd:tls:simple -a defaultSearchScope=one \
-a followReferrals=FALSE -a defaultServerlist=192.168.1.6 > tls-profile.ldif
bash-3.00# cat tls-profile.ldif
dn: cn=tls-profile,ou=profile,dc=gallifrey,dc=net
ObjectClass: top
ObjectClass: DUAConfigProfile
defaultServerList: 192.168.1.6
defaultSearchBase: dc=gallifrey,dc=net
authenticationMethod: tls:simple
followReferrals: FALSE
defaultSearchScope: one
cn: tls-profile
credentialLevel: proxy
serviceAuthenticationMethod: pam_ldap:tls:simple
serviceAuthenticationMethod: passwd-cmd:tls:simple