[389-users] Re: SSL configuration on dynamic deployments

2019-05-22 Thread William Brown
> On 23 May 2019, at 04:15, Angel Bosch wrote: > > Hi again, > > > continuing with my automation I'm facing now the problem of SSL configuration. > > Using certificates at LB level is not recommended acording to > https://directory.fedoraproject.org/docs/389ds/howto/howto-ssl.html > sharing

[389-users] Re: referral on update equivalent with dsconf

2019-05-22 Thread William Brown
> On 22 May 2019, at 21:23, Angel Bosch wrote: > > replying to myself to clarify the original doubt: > > executing something like this on master1 machine: > > dsconf master1 repl-agmt create --suffix dc=global --host slave1.example.net > --port 389 --conn-protocol LDAP --bind-dn cn=repmanage

[389-users] SSL configuration on dynamic deployments

2019-05-22 Thread Angel Bosch
Hi again, continuing with my automation I'm facing now the problem of SSL configuration. Using certificates at LB level is not recommended acording to https://directory.fedoraproject.org/docs/389ds/howto/howto-ssl.html sharing keys is also discouraged, so my question is if there is a way to pr

[389-users] Re: referral on update equivalent with dsconf

2019-05-22 Thread Angel Bosch
replying to myself to clarify the original doubt: executing something like this on master1 machine: dsconf master1 repl-agmt create --suffix dc=global --host slave1.example.net --port 389 --conn-protocol LDAP --bind-dn cn=repmanager,cn=config --bind-passwd --bind-method SIMPLE master1

[389-users] Re: referral on update equivalent with dsconf

2019-05-22 Thread Angel Bosch
> which is why the cli tools were misleading you here sadly. I think > we as a team, need to review and understand what happened here to > cause them to mislead a person about their function. :( > > Sorry that this confusion occured. Does my answer help? > sure! you're answers are always very dee