Re: 389DS Certificates

[Grzegorz Dwornicki <gd1100@xxxxxxxxx>]

if my memory is correct the command will export ca cert from ds database but you have that cert from Windows. This steep is not needed in your case. However if you remove -n, -a options with redirection to file (the greater sygn along with dsca.crt), then you will get listing of your DS's database. This listing will tell you wiat you  an use with -n option.

Greg.

28 mar 2013 11:15, "alexandre" <axel0felix@xxxxxxxxx> napisał(a):

Yes I did it (I put the capture on the attached-file)

But nothing in /etc/dirsrv/slapd-[instance name]/

Thanks

2013/3/28 Grzegorz Dwornicki <gd1100@xxxxxxxxx>

Again in your case: you need to export CA cert from Windows AD CA and import it to DS

Greg.

28 mar 2013 11:05, "alexandre" <axel0felix@xxxxxxxxx> napisał(a):

Hello,

I want to Configure the Password Sync Service and do this command (in /etc/dirsrv/slapd-instance):

"certutil -d . -L -n "CA certificate" -a > dsca.crt"

But "CA certificate" doesn't exist. As I can see in web: 

" /etc/dirsrv/slapd-[instance name]



This is where the certificates for the directory instance are stored, as well as its pin.txt file. "

So I can't export server certificate on my Windows server.

Thanks in advance !

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users