Prashanth Sundaram wrote:> All,
>
> I know I am being a bummer here, but I am running into problems now
> and then. The reason is I am trying to script out the FDS deployment.
>
> Here are my questions:
>
> 1. What is the command line equivalent of requesting a server
> certificate for Admin Server and Directory server? The console
> works fine.
>
> I am using openssl to generate certificates in x509 format.
There is a script which creates a self signed CA cert, then uses that CA
to create server certs, using the certutil and pk12util command line
tools. Have you seen this -
http://directory.fedoraproject.org/wiki/Howto:SSL#Script>
> 2. In order to setup subsequent FDS servers, I should copy
> /etc/dirsrv ; /usr/lib/dirsrv / ; /var/lib/dirsrv to the other
> hosts. Is this correct?
No.> And Run register-ds-admin.pl
No.
You should not copy anything. You should simply run setup-ds-admin.pl
on each machine. If you want to use a centralized console, that is, if
you want to be able to see all of your servers no matter where you run
the console, then you should select the option to use an existing
configuration directory server on each server (other than the first one,
of course).
Have you read the Install Guide -
http://www.redhat.com/docs/manuals/dir-server/8.1/install/index.html>
> 3.If I do as in 2. Not sure if the certificates will cause
> issue. Also I am using ldap.domain.com as server identifier and
> mapping a virtual IP for load balancing purpose. I read that server
> name should be same as hostname, but I am using a DNS record if
> ldap.domain.com. Will it cause any issues?
Yes. You will probably want to use subjectAltName in your directory
server certificates. See
http://directory.fedoraproject.org/wiki/Howto:SSL#Using_Subject_Alt_Name>
> Thanks,
> Prashanth
>
>
>
>
> ------------------------------------------------------------------------
>
> --
> 389 users mailing list
> 389-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>