[Fedora-directory-users] I need help enabling SSL for Fedora DS

Adam Stokes astokes at redhat.com
Wed Aug 3 13:11:27 UTC 2005


On Wed, 2005-08-03 at 06:30 -0500, Darren Fulton wrote:
> The documentation for enabling SSL for Fedora DS at http://directory.fedora.redhat.com/wiki/Howto:SSL includes instructions for creating an LDIF file at /tmp/ssl_enable.ldif.  That file contains a section that reads:
> 
> dn: cn=RSA,cn=encryption,cn=config
> changetype: modify
> add: nsSSLPersonalitySSL
> nsSSLPersonalitySSL: Server-Cert
> 
> That means, it seems, to modify the dn: cn=RSA,cn=encryption,cn=config.  That RSA section does not seem to exist so running the ldif generates errors.  I do see cn=encryption,cn=config, but not cn=RSA,cn=encryption,cn=config 
> 
> I know some of you have SSL working already.  How did you do it?  
> 
> I installed Fedora-DS, went through the Samba How-to, configured Pam to authenticate through LDAP and that all worked.  I then tried the SSL How-to and ran into this problem.  It is possible that I missed a step, but I don't think so because I went through it twice.
> 
> 
> Thanks,
> 
> Darren Fulton
> 
> 
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

Hey Darren,

Thanks for pointing that out please create an ldif /tmp/addrsa.ldif and
have the following :

dn: cn=RSA,cn=encryption,cn=config
objectclass: top
objectclass: nsEncryptionModule
cn: RSA
nsSSLPersonalitySSL: Server-Cert
nsSSLToken: internal (software)

Use ldapadd to add the entry into the directory server.. Ill fix the
how-to now as well :)

adam




More information about the Fedora-directory-users mailing list