Re: [Fedora-directory-users] certutil: generating new .db files for server

2006-07-10 Thread Brian Jones
Hi Rob, thanks for the reply. I've clarified inline: On 7/10/06, Rob Crittenden <[EMAIL PROTECTED]> wrote: Brian Jones wrote:> 3. Is it true that I cannot reuse a signed server certificate in a newly > created database, even if the new database has the same root ca> installe

[Fedora-directory-users] certutil: generating new .db files for server

2006-07-10 Thread Brian Jones
Hi all, I'm generating new *.db files for my server, where I will install a new root ca, and a new server cert (new *.db files allows me to easily test and back out). I have a couple of questions about *.db files and how FDS uses them: 1. When I use certutil -N to create the new db files, is the v

[Fedora-directory-users] updating/renewing CA and server cert

2006-06-12 Thread Brian Jones
Hi all, The SSL Howto on the wiki doesn't really cover a procedure for what to do when your root CA has to be renewed, along with your server certs. I have 3 servers whose server certs are all signed with our own root CA, but that root CA is expiring, and needs to be replaced. Presumably this means

Re: [Fedora-directory-users] solaris 10 caching credentials? Inactivated users allowed in via ssh

2005-08-30 Thread Brian Jones
Well, this makes sense, but I'm using the Sun-recommended pam_ldap configuration, straight from their documentation for Solaris 10. I don't have a machine in front of me, but if memory serves, their configuration includes pam_unix_auth, pam_unix_cred as well as pam_ldap. I've read about the changes

[Fedora-directory-users] solaris client setup doc

2005-07-15 Thread Brian Jones
Hi all, I've put the beginnings of a Solaris client setup doc on the wiki. As questions come up, I or others can update the document. If you're missing schemas or having some issues, have a look. http://directory.fedora.redhat.com/wiki/Howto:SolarisClient brian -- Fedora-directory-users mailing

Re: [Fedora-directory-users] Solaris Client

2005-07-14 Thread Brian Jones
I currently have a Solaris 9 client using LDAP for passwd/group and NIS for netgroups and ethers maps, using TLS, against FDS. It took some doing, but it can be done. Solaris 10 looks like it's going to be a similar process. If this is something worth documenting, I can probably help out with that

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Brian Jones
Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing. On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > Quoting "Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]>: > > > I would like to know when I run the builddsrpm.sh RHEL4 command, I get a > > message saying that it cann

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
intro.htm#39523 > > NB: you trade the ease of startup with a security risk, in that your > keyphrase > is stored in a file cleartext. > > Kevin > > Quoting Brian Jones <[EMAIL PROTECTED]>: > > > Hi all. > > > > I hit a snag yesterday when I reboot

[Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
Hi all. I hit a snag yesterday when I rebooted my directory server box (running RHEL 4). The problem is that I'm using SSL/TLS, and that means that every time I restart the directory server I have to provide the password for the certificate database. Now, I *know* that this would never stand in a

Re: [Fedora-directory-users] cert signing

2005-06-20 Thread Brian Jones
A final note that Rob's solution worked wonderfully once I took note that the dash in the "-P slapd-myinstance-" is significant -- don't forget that! Your cert won't show up in the server cert section without it. On Jun 20, 2005, at 3:21 PM, Rob Crittenden wrote: Jeff Falgout wrote: Br