Displaying 4 results from an estimated 4 matches for "ldapcert".
Did you mean:
ldapcerts
2018 Jun 14
3
CentOS7: Setting up ldap over TLS in kickstart file
...ver.fr"
--ldapbasedn=dc=my,dc=base,dc=dn
Then in a post install script I download the server and ca certificates and
stops nslcd that I do not use:
echo "TLS_REQCERT allow">>/etc/openldap/ldap.conf
cd /etc/openldap/cacerts/ && wget
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt && ln -s ca-bundle.crt
$(openssl x509 -hash -in ca-bundle.crt -noout).0
cd /etc/openldap/certs/ && wget
http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt
cd /
systemctl disable nslcd
I'm unable to see what system-config-authentication is doing more in it...
2018 Jun 14
0
CentOS7: Setting up ldap over TLS in kickstart file
...dc=base,dc=dn
>
> Then in a post install script I download the server and ca certificates and
> stops nslcd that I do not use:
>
> echo "TLS_REQCERT allow">>/etc/openldap/ldap.conf
> cd /etc/openldap/cacerts/ && wget
> http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/ca-bundle.crt && ln -s
> ca-bundle.crt $(openssl x509 -hash -in ca-bundle.crt -noout).0
> cd /etc/openldap/certs/ && wget
> http://xxx.xxx.xxx.xxx/Softwares7/LDAPCERTS/server.crt
> cd /
> systemctl disable nslcd
>
> I'm unable to see what system-config-au...
2002 May 17
3
samba + openldap + tls
...o use the "--with-ssl" option? It's said no.
##############################################
LDAP CONF:
--------------------------
########################
# certificats et clefs
TLSCertificateKeyFile /opt/openldap/pem/ldapuckey.pem
TLSCertificateFile /opt/openldap/pem/ldapcert.pem
TLSCACertificateFile /opt/openldap/pem/demoCA/cacert.pem
##############################################
SMB CONF:
--------------------------
# LDAP:
ldap server = obiwan
ldap port = 389
ldap suffix = "ou=samba, dc=obiwan,dc=fr"
# LDAP SSL:
ldap ssl = no
# Ro...
2009 Feb 18
1
samba can not contact the ldap server
...y * read
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!
# equivalent to TLS_CACERT
TLSCertificateFile /etc/ssl/ldapcert.pem
# selbst-signiertes Zertifikat
# equivalent to TLS_KEY
TLSCertificateKeyFile /etc/ssl/ldapkey.pem
# privater Schluessel
# equivalent to TLS_CERT
TLSCACertificateFile /etc/ssl/demoCA/cacert.pem
# Certificate Authority
# this is equivalent to TLS_REQCERT
#TLSVerifyClient allow
#TLSVe...