On 2 Sep 2019, at 00:17, Nicolas Kovacs <info(a)microlinux.fr>
wrote:
Hi,
I've just completed a detailed blog article series about central
authentication using 389 Directory Server. It's in French, and I
published it on my tech blog.
Thanks, this is great!
I already sent feedback about this in a previous email.
I'm a bit concerned about putting your self signed CA in the system trust store here.
You may be better to put this in:
cp ca.crt /etc/openldap/certs/
/usr/bin/c_rehash /etc/openldap/certs/
Then you can use TLS_CACERTDIR /etc/openldap/certs for ldap.conf, and clients like
sssd.conf.
Hope that helps,
Cheers from the sunny South of France,
Niki Kovacs
--
Microlinux - Solutions informatiques durables
7, place de l'église - 30730 Montpezat
Site :
https://www.microlinux.fr
Mail : info(a)microlinux.fr
Tél. : 04 66 63 10 32
Mob. : 06 51 80 12 12
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server
SUSE Labs