[389-users] Which is the correct Certificate ?

[Ajeet S Raina]

Hello Guys,

I am confused with setting up of 389-DS Client. All I want to know is which
certificate I need to copy to LDAP CLient.
All I tried searching for :

On 389-DS Server:

[root at 389-supplier ~]# find / -name cacert.asc
/etc/dirsrv/slapd-389-supplier/cacert.asc

Is this the Correct certifcate I need to copy to clients'
/etc/openldap/cacert/ directory.

If yes, then i tried putting it to remote LDAP Client but it showed me the
error while authconfig-tui:


I selected LDAP >> [*] TLS Server: ldap://<>:636 Base DN
[root at 389-Client cacerts]# authconfig-tui
unable to load certificate
4053:error:0906D06C:PEM routines:PEM_read_bio:no start
line:pem_lib.c:647:Expecting: TRUSTED CERTIFICATE
Stopping nscd:                                             [FAILED]
Starting nscd:                                             [  OK  ]
[root at 389-ds cacerts]#
[root at 389-ds cacerts]#
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20100126/d41d765f/attachment.html>