Yann Cloatre wrote: > Hello all, > > I use DS Fedora LDAP on Solaris 9. > I try to use a crypto accelerator 4000 board (SUN) with Fedora. > (FYI; > http://www.sun.com/products/networking/sslaccel/suncryptoaccel4000/index.xml > <http://www.sun.com/products/networking/sslaccel/suncryptoaccel4000/index.xml>) > > I've a certificate store on the board, with a certificates inside. > User is define on the board to access this certificate store. > > I patched Fedora with a modified script from SUN to enabled this > certificate store in Sun One server. > It's work and i can see 3 certificates store in the window "Manage > Certificate" : > - Internal (Software) > - Acceleration only (Sun Doc don't selected this one, FYI > http://docs.sun.com/app/docs/coll/crypto-accel4000 mine is 1.1 for > Solaris 9) > - MYCERTIFICATESTORE > > In GUI, each time Fedora need to access inside MYCERTIFICATESTORE, ask > me a password. It's the password define in the accelerator board. So, > i enter in th password box ; "user:password" and Fedora display the > related information. > > So everything is ok, i can enable encryption and select my certificate > in MYCERTIFICATESTORE for LDAPs. > > But, when i try to restart Fedora ; > > [09/Jan/2008:19:34:55 +0000] - SSL alert: Security Initialization: > Unable to find slot (Netscape Portable Runtime error -8127 - The > security card or token does not exist, needs to be initialized, or has > been removed.) > [09/Jan/2008:19:34:55 +0000] - ERROR: SSL Initialization Failed > > I try to define password in the slapd-servname-pin.txt in alias > directory with a format like ; > Internal (Software) Token:password > MYCERTIFICATESTORE:ldap-admin:password0 > > But nothing, impossible to restart. Perhaps, the problem is related to > the password format (ldap-admin:password0), but i must provide > username and password to Fedora if the application want access the token. > It's work well in GUI interface and i don't understand why Fedora > seems to not find my token at startup ? Did you try just using MYCERTIFICATESTORE:password ? > > Help appreciate. > > Thank you. > > > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20080110/d2edbe4f/attachment.bin
