On 05/06/10 14:34, Boris Samorodov wrote:
On Thu, 06 May 2010 14:15:54 +0200 Frank Bonnet wrote:

I actually have an Openldap directory server that runs on a FreeBSD box
at 8.0-RELEASE amd64

It runs nicely but I want to add LDAPS service on the SAME server.

Is it possible ? I have generated

cert.crt
cert.csr
cert.key

as instructed in the FreeBSD howto but when I add the following
lines in slapd.conf file it fails to restart

TLSCACertificateFile  /usr/local/etc/openldap/ssl/cert.crt
TLSCertificateFile    /usr/local/etc/openldap/ssl/cert.crt
TLSCertificateKeyFile /usr/local/etc/openldap/ssl/cert.key

in ldap.conf file I have the following

#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable but not world writable.

BASE    dc=esiee,dc=fr
URI     ldap://ldap.esiee.fr ldaps://ldap.esiee.fr

#SIZELIMIT      12
#TIMELIMIT      15
#DEREF          never

What did I missed ?

I'm not sure but maybe you should add the following line to
/etc/rc.conf[.local]:
-----
slapd_flags='-h "ldap:/// ldaps:///"'
-----

Look at SLAPD(8C) for more details.


Cool ! it works ,

Thanks Boris :-)


_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"

Reply via email to