[Fedora-directory-users] PIN file for unattended SSL restarts

[Richard Megginson]

Rob Crittenden wrote:

> Graham Leggett wrote:
>
>> Mike Jackson wrote:
>>
>>> [root at vectra-3 alias]# pwd
>>> /opt/fedora-ds/alias
>>>
>>> [root at vectra-3 alias]# cat slapd-netauth-pin.txt
>>> Internal (Software) Token:secret
>>>
>>> Substitute "netauth" for your instance name. Substitute "secret" for 
>>> your security database's password.
>>
>>
>>
>> Thanks for the info - it seemed to work for the LDAP server but not 
>> for the admin server for some reason.
>>
>> Is it possible to update the wiki entry at 
>> http://directory.fedora.redhat.com/wiki/Howto:SSL#Starting_the_Server_with_SSL_enabled 
>> with this info? It contains the line "If you do not have PIN file, it 
>> will prompt you for the password you used to create the server 
>> cert.", but doesn't explain what a PIN file is as you've explained 
>> above.
>
>
> Edit /opt/fedora-ds/admin-serv/config/nss.conf. Look for the line:
>
> NSSPassPhraseDialog  builtin
>
> Change it to the form:
>
> NSSPassPhraseDialog file:/path/to/password/file
>
> e.g.
>
> NSSPassPhraseDialog file:/opt/fedora-ds/admin-serv/config/admin.txt
>
> The format is slightly different from the DS, it is:
>
> internal:secret
>
> Substitute "secret" for the admin server security database password.

The SSL Howto now has a shell script which automates much of the SSL 
setup process including the Admin Server pin file.  See 
http://directory.fedora.redhat.com/wiki/Howto:SSL#Script for more 
information.

>
> rob
>
>------------------------------------------------------------------------
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060306/6c9dda47/attachment.bin>