Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Oscar Plameras
Yes, you're right. Whereas before the script simply checks if TLS is configured and invokes ldaps. So, now it has to be expressly set to 'yes' if you wish ldaps to start otherwise it will say and do nothing. Thanks for that. On Wed, Feb 4, 2009 at 11:04 AM, Nalin Dahyabhai wrote: > On Wed, Feb 0

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Oscar Plameras
Yes. and all certificate files. Of course I changed owner of newkey.pem to ldap.ldap and chmod to 600. On Wed, Feb 4, 2009 at 10:43 AM, Craig White wrote: > On Wed, 2009-02-04 at 10:21 +1100, Oscar Plameras wrote: >> Yes, I have. This what I do to create certificates: >> >> #cd /etc/pki/tls >> #.

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Craig White
On Wed, 2009-02-04 at 10:21 +1100, Oscar Plameras wrote: > Yes, I have. This what I do to create certificates: > > #cd /etc/pki/tls > #./misc/CA -newca # do once the first time > #./misc/CA -newreq# do everytime you want another > #./misc/CA -sign# > > This

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Nalin Dahyabhai
On Wed, Feb 04, 2009 at 09:39:07AM +1100, Oscar Plameras wrote: > 1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6, > OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6. > And these were perfectly running with OPENSSL configured on > 'slapd.conf' as follows: > > lines cut > # > # > TLS

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Oscar Plameras
Yes, I have. This what I do to create certificates: #cd /etc/pki/tls #./misc/CA -newca # do once the first time #./misc/CA -newreq# do everytime you want another #./misc/CA -sign# This will create a directory CA under /etc when you do #./misc/CA the first t

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Oscar Plameras
I have these cyrus modules installed: cyrus-sasl-md5-2.1.22-19.fc10.i386 cyrus-sasl-lib-2.1.22-19.fc10.i386 cyrus-sasl-krb4-2.1.22-19.fc10.i386 cyrus-sasl-plain-2.1.22-19.fc10.i386 cyrus-sasl-devel-2.1.22-19.fc10.i386 cyrus-sasl-2.1.22-19.fc10.i386 OPlameras On Wed, Feb 4, 2009 at 9:59 AM, Rick

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Craig White
On Wed, 2009-02-04 at 09:39 +1100, Oscar Plameras wrote: > 1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6, > OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6. > And these were perfectly running with OPENSSL configured on > 'slapd.conf' as follows: > > lines cut > # > # > TLSCACerti

Re: OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Rick Stevens
Oscar Plameras wrote: 1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6, OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6. And these were perfectly running with OPENSSL configured on 'slapd.conf' as follows: lines cut # # TLSCACertificateFile /etc/CA/cacert.pem TLSCertificateFile

OpenLDAP, OpenSSL, and Fedora 10 Stop Liking One Another ?

2009-02-03 Thread Oscar Plameras
1. System1 - I had 3 test servers running OpenLDAP-2.3.30-3.fc6, OpenSSL-0.9.8b-15.fc6 on Linux-2.6.22.14-72.fc6. And these were perfectly running with OPENSSL configured on 'slapd.conf' as follows: lines cut # # TLSCACertificateFile /etc/CA/cacert.pem TLSCertificateFile/etc/pki/tls/newcert.pe