Prashanth Sundaram wrote:
Rich,
I went forward with manual SSL install. I still see the console
showing ldap.foo.com:389 on the top tree level.
That's just for labeling. If
you have restarted the directory server
after configuring it to use TLS, you should see in the error log a
message that it is listening on the TLS/SSL port. You should also be
able to use netstat to see that it is listening to both the LDAP port
(389) and the LDAPS port (636) (or whatever other port numbers you may
have configured).
The “User DS” field in Admin server points to ldap.foo.com:636. I
have
set all the encryption via console. Am I missing something? When I
issue ldapsearch –p 389, it returns ldap_sasl_interactive_bind_s:
Unknown authentication method (-6) additional info: SASL(-4): no
mechanism available:
/usr/bin/ldapsearch by default will attempt a SASL bind. You
must use
the -x argument to use simple bind.
When I issue, ldapsearch –p 636 is asks for pass but hangs thereafter.
I have imported 500 entries. Also my indexes don’t seem to work, when
searched on console.
Why do you think your indexes are not working?
I used proper ldapsearch with all possible switches -x , -Z, -ZZ.
Note that -Z will require you to configure your ldapsearch client to use
a CA cert - see man ldap.conf - search for TLS - you can also create/use
~/.ldaprc
After I enabled indexing on the directory level and ou levels, when I
click on search with nothing on search bar, it retuns the ou levels
and not users. So I manually indexed individual users, they don;t show
up anyway.
I'm not sure what you mean by "index" in this context.
Thanks,
------------------------------------------------------------------------
--
389 users mailing list
389-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users