Hello:
I broke access completely to my LDAP after following the SSL HOWTO (in part because there are 2 sets of instructions -- one is a Redhat link appearing at the top of that howto page, which is what I followed and coincidently broke access with, the other set of instructions appear on the same page shortly after that Redhat link and was the correct way I should have implemented my self-signed certs). I am pretty sure this has to do with ports since there is some mention of needing to be at a port above 1024 if installed root, however I installed and run it as nobody.
How do I go back in and disable SSL now that I can't access anything? I can't seem to log in anywhere now with my directory manager password.
Thanks for the assistance.
-jeff
____________________________________________________________________________________ Yahoo! oneSearch: Finally, mobile search that gives answers, not web links. http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
Jeff wrote:
Hello:
I broke access completely to my LDAP after following the SSL HOWTO (in part because there are 2 sets of instructions -- one is a Redhat link appearing at the top of that howto page, which is what I followed and coincidently broke access with, the other set of instructions appear on the same page shortly after that Redhat link and was the correct way I should have implemented my self-signed certs). I am pretty sure this has to do with ports since there is some mention of needing to be at a port above 1024 if installed root, however I installed and run it as nobody.
Why do you think it has to do with ports? Note that the server can run as "nobody" and listen to 389 and/or 636, as long as the servers are _started_ by root (or from init). The server drops privileges after binding to the ports.
How do I go back in and disable SSL now that I can't access anything? I can't seem to log in anywhere now with my directory manager password.
It depends. But you can usually stop the server, edit dse.ldif, set nsslapd-security: off, save, and start.
Thanks for the assistance.
-jeff
Yahoo! oneSearch: Finally, mobile search that gives answers, not web links. http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC
-- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users
389-users@lists.fedoraproject.org