[Freeipa-users] can live turn off nsslapd-security: to off ?

[David Kupka]

On 27/04/16 13:15, barrykfl at gmail.com wrote:
> Do u meant use ldapmodify?
> I tried update the dse.ldif but it will fall back after a while.
>
> 2016年4月27日 下午7:10 於 "David Kupka" <dkupka at redhat.com
> <mailto:dkupka at redhat.com>> 寫道：
>
>     On 27/04/16 12:48, barrykfl at gmail.com <mailto:barrykfl at gmail.com> wrote:
>
>         Hi:
>
>         Without restarting dirsrv possible do that ?
>
>
>         thx Regards
>
>         barry
>
>
>
>
>     Hello Barry,
>
>     this ldapsearch should list all attributes that needs restart after
>     modification:
>
>     $ ldapsearch -D "cn=Directory Manager" -w Secret123 -b cn=config
>     nsslapd-requiresrestart
>
>     I don't see nsslapd-security listed so it should be possible to change it in
>     runtime.
>
>     --
>     David Kupka
>

Yes, I mean ldapmodify.

Editing dse.ldif while dirsrv is running has no effect because it is 
read only at start and written at least before exit.

If you REALLY need to edit dse.ldif be sure to stop dirsrv then edit it 
and start dirsrv again.

-- 
David Kupka