PIN file for unattended SSL restarts

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Rob Crittenden wrote:

> Graham Leggett wrote:
>
>> Mike Jackson wrote:
>>
>>> [root at vectra-3 alias]# pwd
>>> /opt/fedora-ds/alias
>>>
>>> [root at vectra-3 alias]# cat slapd-netauth-pin.txt
>>> Internal (Software) Token:secret
>>>
>>> Substitute "netauth" for your instance name. Substitute "secret" for 
>>> your security database's password.
>>
>>
>>
>> Thanks for the info - it seemed to work for the LDAP server but not 
>> for the admin server for some reason.
>>
>> Is it possible to update the wiki entry at 
>> http://directory.fedora.redhat.com/wiki/Howto:SSL#Starting_the_Server_with_SSL_enabled 
>> with this info? It contains the line "If you do not have PIN file, it 
>> will prompt you for the password you used to create the server 
>> cert.", but doesn't explain what a PIN file is as you've explained 
>> above.
>
>
> Edit /opt/fedora-ds/admin-serv/config/nss.conf. Look for the line:
>
> NSSPassPhraseDialog  builtin
>
> Change it to the form:
>
> NSSPassPhraseDialog file:/path/to/password/file
>
> e.g.
>
> NSSPassPhraseDialog file:/opt/fedora-ds/admin-serv/config/admin.txt
>
> The format is slightly different from the DS, it is:
>
> internal:secret
>
> Substitute "secret" for the admin server security database password.

The SSL Howto now has a shell script which automates much of the SSL 
setup process including the Admin Server pin file.  See 
http://directory.fedora.redhat.com/wiki/Howto:SSL#Script for more 
information.

>
> rob
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060306/6c9dda47/attachment.bin 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux