<div dir="ltr">
<p class="">389-ds-base-1.2.11.25-1.el6.x86_64</p>
<p class="">idm-console-framework-1.1.7-2.el6.noarch</p>
<p class="">389-ds-console-1.2.6-1.el6.noarch</p></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 31, 2014 at 8:49 PM, Noriko Hosoi <span dir="ltr"><<a href="mailto:nhosoi@redhat.com" target="_blank">nhosoi@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello,<br>
<br>
What is the versions of your server and console?<br>
$ rpm -q 389-ds-base idm-console-framework 389-ds-console
389-ds-admin<span class=""><br>
<br>
On 12/30/2014 02:32 PM, John Trump wrote:<br>
</span></div><span class="">
<blockquote type="cite">
<div dir="ltr">Is there a way to permanently disable SSLv3 in
directory server? If I modify the dse.ldif file and set nssSSL3
</div>
</blockquote></span>
When you made this modification, did you restart the server?<span class=""><br>
<blockquote type="cite">
<div dir="ltr">to off this works until an admin goes through the
gui and makes a change to the encryption cert and saves config.
Once this happens SSLv3 is enabled again.</div>
</blockquote></span>
If the answer to the above question is "yes", is it possible to
repeat the operations with the audit log enabled
("nsslapd-auditlog-logging-enabled: on") and share the audit log
(/var/log/dirsrv/slapd-YOURID/audit) with us? Thanks.<br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div><br>
</div>
</div>
<br><span class="HOEnZb"><font color="#888888">
<fieldset></fieldset>
<br>
<pre>--
389 users mailing list
<a href="mailto:389-users@lists.fedoraproject.org" target="_blank">389-users@lists.fedoraproject.org</a>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</font></span></blockquote>
<br>
</div>
<br>--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a><br></blockquote></div><br></div>