On [Sat, 17.01.2009 21:37], John A. Sullivan III wrote: >I'm in the midst of setting up a DS replica using SSL and find myself a >bit confused on the purpose of the User DS and Configuration DS tabs in >the Administration Server Configuration. Could someone point me to some >documentation on them? > >What do they represent? I am guessing the Configuration DS is how we >connect to the portion of the tree holding configuration >(o=NetscapeRoot?). When the LDAP server is part of another >administrative domain, should this point to the local LDAP server or to >the LDAP server which manages the administrative domain? The Configuration DS is o=Netscaperoot and User DS is the dn of your DIT, eg. dc=example,dc=com. Since you can setup a dedicated DS just for your Configuration, it makes sense to have seperated SSL-Configuration settings for accessing the Configuration and User DS. When you have a setup where several LDAP instances sharing the same Configuration Directory, then you have to point the User DS to the local running instances and for the Configuration Directory you point to the server which holds a copy of o=NetscapeRoot. Happy Day. Thorsten -- "Eternity is a very long time, especially towards the end." ? Stephen Hawking -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3855 bytes Desc: not available Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20090118/d0ac2e97/attachment.bin