[Fedora-directory-users] certutil: generating new .db files for server

2006-07-10 Thread Brian Jones
Hi all, I'm generating new *.db files for my server, where I will install a new root ca, and a new server cert (new *.db files allows me to easily test and back out). I have a couple of questions about *.db files and how FDS uses them: 1. When I use certutil -N to create the new db files, is the

[Fedora-directory-users] updating/renewing CA and server cert

2006-06-12 Thread Brian Jones
Hi all, The SSL Howto on the wiki doesn't really cover a procedure for what to do when your root CA has to be renewed, along with your server certs. I have 3 servers whose server certs are all signed with our own root CA, but that root CA is expiring, and needs to be replaced. Presumably this

Re: [Fedora-directory-users] solaris 10 caching credentials? Inactivated users allowed in via ssh

2005-08-30 Thread Brian Jones
Well, this makes sense, but I'm using the Sun-recommended pam_ldap configuration, straight from their documentation for Solaris 10. I don't have a machine in front of me, but if memory serves, their configuration includes pam_unix_auth, pam_unix_cred as well as pam_ldap. I've read about the

[Fedora-directory-users] solaris client setup doc

2005-07-15 Thread Brian Jones
Hi all, I've put the beginnings of a Solaris client setup doc on the wiki. As questions come up, I or others can update the document. If you're missing schemas or having some issues, have a look. http://directory.fedora.redhat.com/wiki/Howto:SolarisClient brian -- Fedora-directory-users

Re: [Fedora-directory-users] Solaris Client

2005-07-14 Thread Brian Jones
I currently have a Solaris 9 client using LDAP for passwd/group and NIS for netgroups and ethers maps, using TLS, against FDS. It took some doing, but it can be done. Solaris 10 looks like it's going to be a similar process. If this is something worth documenting, I can probably help out with

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
NB: you trade the ease of startup with a security risk, in that your keyphrase is stored in a file cleartext. Kevin Quoting Brian Jones [EMAIL PROTECTED]: Hi all. I hit a snag yesterday when I rebooted my directory server box (running RHEL 4). The problem is that I'm using SSL

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Brian Jones
Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing. On 7/8/05, Kevin Myer [EMAIL PROTECTED] wrote: Quoting Talwar, Puneet (NIH/NIAID) [EMAIL PROTECTED]: I would like to know when I run the builddsrpm.sh RHEL4 command, I get a message saying that it cannot find