[Fedora-directory-users] PIN file for unattended SSL restarts

[Rob Crittenden]

Graham Leggett wrote:
> Mike Jackson wrote:
> 
>> [root at vectra-3 alias]# pwd
>> /opt/fedora-ds/alias
>>
>> [root at vectra-3 alias]# cat slapd-netauth-pin.txt
>> Internal (Software) Token:secret
>>
>> Substitute "netauth" for your instance name. Substitute "secret" for 
>> your security database's password.
> 
> 
> Thanks for the info - it seemed to work for the LDAP server but not for 
> the admin server for some reason.
> 
> Is it possible to update the wiki entry at 
> http://directory.fedora.redhat.com/wiki/Howto:SSL#Starting_the_Server_with_SSL_enabled 
> with this info? It contains the line "If you do not have PIN file, it 
> will prompt you for the password you used to create the server cert.", 
> but doesn't explain what a PIN file is as you've explained above.

Edit /opt/fedora-ds/admin-serv/config/nss.conf. Look for the line:

NSSPassPhraseDialog  builtin

Change it to the form:

NSSPassPhraseDialog file:/path/to/password/file

e.g.

NSSPassPhraseDialog file:/opt/fedora-ds/admin-serv/config/admin.txt

The format is slightly different from the DS, it is:

internal:secret

Substitute "secret" for the admin server security database password.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060306/79fc306d/attachment.bin>