On 12/03/2013 03:11 PM, Gordon Messmer wrote:
On 11/25/2013 03:54 PM, Rich Megginson wrote:
> Is there some reason you need to upgrade from the OS provided official
> RHEL 6.4 version of 389-ds-base to the non-OS provided version from the
> rmeggins epel6 repo?
Now I remember... there's no Windows sync in the RHEL package.
Yes, there is. Do you mean POSIX Windows Sync?
We needed that in at least one of our deployments, and we want all of
our deployments to be consistent.
> The error message is saying that it cannot find your unlocked server SSL
> key. I am assuming this all worked before, and you have a pin.txt file
> and/or you have permanently unlocked your key/cert db.
We had the same problem at another site. It looks like all of our
sites with third-party certificates -- those signed by a CA whose
certificates we also had to add to the database -- are affected by the
problem.
Ok. The problem has been found and fixed -
https://fedorahosted.org/389/ticket/47596 - the fix will be in the next
389-ds-base version.
We didn't test using an unlocked key/cert db.
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users