Re: [Fedora-directory-users] still working instructions through...
On Thu, 2005-12-08 at 19:11 -0700, Richard Megginson wrote:
Craig White wrote:
>>>
>>You will get this error if you try to use startTLS but the server is not
>>configured for security, which brings us back to your earlier problem . . .
>>What are the first few lines of slapd-srv1/logs/errors?
>>
>>
>----
>you are right on the money but I don't know why.
>
>nsslapd-security: on # in /opt/fedora-ds/slapd-srv1/config/dse.ldif
>
>then 'service fds restart' will absolutely hang and never start up.
>
>if it equals 'off' then obviously slapd will start up.
>
>recent efforts which include the 'hang' effect show nothing
>in /opt/fedora-ds/slapd-srv1/logs/error but the one time that I
>restarted the server from the console, it did show this...
>
>[08/Dec/2005:15:22:57 -0700] - SSL alert: Security Initialization:
>Unable to authenticate (Netscape Portable Runtime error -8177 - The
>security password entered is incorrect.)
>[08/Dec/2005:15:22:57 -0700] - ERROR: SSL Initialization Failed.
>
>
Darn it. That's right. With SSL enabled, you must start the server
from the console, in order to provide the pin for the key/cert db.
If you want to do unattended server restarts, you have to purchase a
PKCS11 Hardware Security Module or create a slapd-svr1-pin.txt file in
the proper format with the cleartext password in it.
----
OK - important detail
slapd-srv1-pin.txt
does that go in
/opt/fedora-ds/alias ?
/opt/fedora-ds/slapd-srv1 ?
Thanks
Craig