I still have problem with ssl replication...in order to resolv this problem I post my steps to configure it..thanks in advance if someone could help me..: 1)in alias directory I make pwdfile.txt and noise .txt 2) Make a .db file: ../shared/bin/certutil -N -d . -f pwdfile.txt 3) Make an encrypted key: ../shared/bin/certutil -G -d . -z noise.txt -f pwdfile.txt 4) Make an mysel certificate: ../shared/bin/certutil -S -n "CA certificate" -s "cn=CAcert" -x -t "CT,," -m 1000 -v 120 -d . -z noise.txt -f pwdfile.txt 5) make a CA server ../shared/bin/certutil -S -n "Server-Cert" -s "cn=domain.example.com" -c "CA certificate" -t "u,u,u" -m 1001 -v 120 -d . -z noise.txt -f pwdfile.txt 6) Rename db and relink: mv cert8.db slapd-server-cert8.db mv key3.db slapd-server-key3.db ln -s slapd-server-cert8.db cert8.db ln -s slapd-server-key3.db key3.db chown nobody *.db 7) Esporting certificate: ../shared/bin/certutil -L -d . -n "CA Certificate" -a > nodo1.cert.asc 8) Send to nodo2 scp nodo1.cert.asc root at nodo2:/opt/fedora-ds/alias/ 9)Importing in db: ../shared/bin/certutil -A -d . -P slapd-nodo2- -n "CA Certificate" -t "CT,," -a -i nodo1.cert.asc 10) make a replication with mmr.pl script ./mmr.pl --host1 nodo1.domain.example.com --host2 nodo2.domain.example.com --host_id 1 --host_id 2 --bindpw secretpwd --repmanpw secret --create --with-ssl 11) After that....should be a replication...but if in slapd log I find: NSMMReplicationPlugin - agmt=cn"Replication to nodo2.domain.example.com"" (nodo2:636): SSL Not Initialized, Replication over SSL FAILED NSMMReplicationPlugin - agmt=cn"Replication to nodo2.domain.example.com"" (nodo2:636):incremental update failed and requires administrator action Any help is greetly apreciated! Alex
