Re: reset openldap root and cn=admin password

On 21.09.23 21:27, Kaushal Shriyan wrote: Is there a way to reset both openldap root and cn=admin password? It depends if your are using classic slapd.conf or cn=config backend. In the first case, just edit slapd.conf and look for rootdn and rootpw in the database section. Please use slap

reset openldap root and cn=admin password

Hi, Is there a way to reset both openldap root and cn=admin password? Please guide me. Thanks in Advance. Best Regards, Kaushal

Re: changing certificate and key for autoca

Stefan Kania wrote: > Thank you, now it's working. Would be nice if it documented somewhere, maybe > the manpage :-) That is precisely what the ";binary" option means. It is documented in RFC4522. You should not be using attribute options without understanding what they mean. > > > > Am 21.09

Re: changing certificate and key for autoca

Am 21.09.23 um 19:13 schrieb Stefan Kania: Thank you, now it's working. Would be nice if it documented somewhere, maybe the manpage :-) ^.^ found it in the Manpage, it's late :-) Am 21.09.23 um 18:08 schrieb Howard Chu: Stefan Kania wrote: Hi all, I like to change the certificate and

Re: changing certificate and key for autoca

Thank you, now it's working. Would be nice if it documented somewhere, maybe the manpage :-) Am 21.09.23 um 18:08 schrieb Howard Chu: Stefan Kania wrote: Hi all, I like to change the certificate and the key for autoca, but I can't find any description how to do it. I tried the following LD

Re: changing certificate and key for autoca

Stefan Kania wrote: > Hi all, > > I like to change the certificate and the key for autoca, but I can't find any > description how to do it. I tried the following LDIF: The LDAP PKI schema uses DER values, not PEM. > --- > dn: dc=example,dc=net > changetype: modify > replace: cACerti

changing certificate and key for autoca

Hi all, I like to change the certificate and the key for autoca, but I can't find any description how to do it. I tried the following LDIF: --- dn: dc=example,dc=net changetype: modify replace: cACertificate;binary cACertificate;binary:< file:///root/mycert/cacert.pem - replace: cAP

Re: openldap + bind-dyndb-ldap + bind

Am Thu, Sep 21, 2023 at 11:58:50AM + schrieb Marc: > What a fuckups there at redhat/fedora. This plugin served me always wel. Now > these morons require ldap write access which I manage to bypass with[1]. Then > I guess it downloads everything from ldap and I have more memory/swap usage > a

RE: openldap + bind-dyndb-ldap + bind

> > > > > > > > If I enable this module, does it mean that this slapd stops receiving > > > updates from the master? > > > > No, it's perfectly fine to run syncprov on consumers as well. > > > > I guess such messages are related to that my ldap is not allowing updates > not? Which I want for th

Re: regular yum symas-openldap-servers update breaks permissions on /var/symas/openldap-data

Hi Ondřej, Thanks for your reply. Yes, we are putting our (single file) mdb straight in /var/symas/openldap-data, using subdirs never crossed our minds. Anyway, we just have to document this behaviour in our upgrade documentation. Must say: the behaviour, for us, is a little bit unexcpected. We

RE: openldap + bind-dyndb-ldap + bind

> > > If I enable this module, does it mean that this slapd stops receiving > > updates from the master? > > No, it's perfectly fine to run syncprov on consumers as well. > I guess such messages are related to that my ldap is not allowing updates not? Which I want for this one. "Server is