Hi Chris,
A default database gets created anyway if I remember correctly so no need to
recreate it. In my experience it best to do all changes to the cert database
before you start the LDAP services. So if you make changes then restart the
389 directory server. You also need to set a password for the service to
read the database if you have made the cert database password protected.
Regards
2011/10/19 Chris Cawley <cawley(a)wrlc.org>
### Starting ldap parts****
groupadd -g 10000 ldap****
useradd -u 10000 -g 10000 -d /home/ldap ldap****
yum install 389-admin****
yum install 389-adminutil 389-adminutil-devel \****
389-ds-base 389-ds-base-devel 389-ds-base-libs****
** **
### Take defaults****
/usr/sbin/setup-ds-admin.pl****
** **
chkconfig --levels 2345 dirsrv on****
chkconfig --levels 2345 dirsrv-admin on****
chkconfig --levels 2345 httpd on****
** **
### LDAP/SSL****
cd /etc/dirsrv/slapd-ldap****
certutil -N -d .****
certutil -L -d .****
** **
At some point, the CA Builtin tokens are all gone.****
** **
**- **Chris****
*From:* 389-users-bounces(a)lists.fedoraproject.org [mailto:
389-users-bounces(a)lists.fedoraproject.org] *On Behalf Of *Gerhardus
Geldenhuis
*Sent:* Wednesday, October 19, 2011 8:49 AM
*To:* General discussion list for the 389 Directory server project.
*Subject:* Re: [389-users] SSL Question****
** **
Hi Chris,****
Not seen that before could you detail the steps you have taken thus far to
get to the point you at now.****
** **
Regards****
2011/10/19 Chris Cawley <cawley(a)wrlc.org>****
Hello –****
****
We are in the process of setting up SSL on 389 ds; however,****
it appears that the CA cert db is empty. The builtin tokens ****
are not even loaded. Any ideas why?****
****
- Thanks****
****
****
Chris Cawley****
System Administrator****
Washington Research Library Consortium****
301-390-2049****
cawley(a)wrlc.org****
****
****
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users****
****
** **
--
Gerhardus Geldenhuis****
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
--
Gerhardus Geldenhuis