[389-users] OS to authenticate to DS using TLS

David (Dave) Donnan david.donnan at thalesgroup.com
Wed Jun 17 12:58:01 UTC 2009


Hello. I think I understand the problem.

I copied the CA cert locally to /tmp/CAcert.txt

I then ran 'system-config-authentication'  and used a URL like the 
following (where it says 'Download CA Certificate'):

file:///tmp/CAcert.txt

It's a lazy man's approach but it worked.

Cdlt, Dave
--------


And John A. Sullivan III wrote:
> On Tue, 2009-06-16 at 19:25 -0500, Doug Coats wrote:
>   
>> So my next hurdle I am tackling SSL certificates.  I produced
>> self-signed certificates and have installed them in through the
>> Management Console.  I can run the Management Console using a secure
>> connection.
>>  
>> Linux uses DS to authenticate (configured using System >
>> Administration > Authentication and enableing LDAP support).  If I try
>> to "Use TLS to encrypt connection" I can't program a URL that will let
>> me download the CA Certificate successfully. I hope that all made
>> sence.
>>  
>> Am I missing something?  Do I need this?
>>     
> <snip>
>   
> Sorry, I don't quite follow.  I know it was a difficult to follow post
> but I did post how we set up SSL communications including the client
> side setup.  We simply copied the CA cert to the clients (servers using
> LDAP for authentication) via scp - John
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20090617/c0d74747/attachment.html>


More information about the 389-users mailing list