Yes, you're right. Whereas before the script simply checks if TLS is
configured and invokes ldaps. So, now it has to be expressly set
to 'yes' if you wish ldaps to start otherwise it will say and do nothing.
Thanks for that.
On Wed, Feb 4, 2009 at 11:04 AM, Nalin Dahyabhai wrote:
> On Wed, Feb 0
Yes. and all certificate files. Of course I changed owner of newkey.pem to
ldap.ldap and chmod to 600.
On Wed, Feb 4, 2009 at 10:43 AM, Craig White wrote:
> On Wed, 2009-02-04 at 10:21 +1100, Oscar Plameras wrote:
>> Yes, I have. This what I do to create certificates:
>>
>> #cd /etc/pki/tls
>> #.
On Wed, 2009-02-04 at 10:21 +1100, Oscar Plameras wrote:
> Yes, I have. This what I do to create certificates:
>
> #cd /etc/pki/tls
> #./misc/CA -newca # do once the first time
> #./misc/CA -newreq# do everytime you want another
> #./misc/CA -sign#
>
> This
On Wed, Feb 04, 2009 at 09:39:07AM +1100, Oscar Plameras wrote:
> 1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6,
> OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6.
> And these were perfectly running with OPENSSL configured on
> 'slapd.conf' as follows:
>
> lines cut
> #
> #
> TLS
Yes, I have. This what I do to create certificates:
#cd /etc/pki/tls
#./misc/CA -newca # do once the first time
#./misc/CA -newreq# do everytime you want another
#./misc/CA -sign#
This will create a directory CA under /etc when you do #./misc/CA the
first t
I have these cyrus modules installed:
cyrus-sasl-md5-2.1.22-19.fc10.i386
cyrus-sasl-lib-2.1.22-19.fc10.i386
cyrus-sasl-krb4-2.1.22-19.fc10.i386
cyrus-sasl-plain-2.1.22-19.fc10.i386
cyrus-sasl-devel-2.1.22-19.fc10.i386
cyrus-sasl-2.1.22-19.fc10.i386
OPlameras
On Wed, Feb 4, 2009 at 9:59 AM, Rick
On Wed, 2009-02-04 at 09:39 +1100, Oscar Plameras wrote:
> 1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6,
> OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6.
> And these were perfectly running with OPENSSL configured on
> 'slapd.conf' as follows:
>
> lines cut
> #
> #
> TLSCACerti
Oscar Plameras wrote:
1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6,
OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6.
And these were perfectly running with OPENSSL configured on
'slapd.conf' as follows:
lines cut
#
#
TLSCACertificateFile /etc/CA/cacert.pem
TLSCertificateFile
1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6,
OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6.
And these were perfectly running with OPENSSL configured on
'slapd.conf' as follows:
lines cut
#
#
TLSCACertificateFile /etc/CA/cacert.pem
TLSCertificateFile/etc/pki/tls/newcert.pe