Re: superuser and normal user in OpenLdap services

2023-12-13 Thread Quanah Gibson-Mount
--On Wednesday, December 13, 2023 11:31 PM +0530 Kaushal Shriyan wrote: Please guide me. Thanks in advance. The "rootdn" for a database has full access to that database regardless of ACLs. --Quanah

Re: SSL certificate install

2023-12-13 Thread Quanah Gibson-Mount
--On Wednesday, December 13, 2023 7:51 AM + Jean-Luc Chandezon wrote: Hello dear community, I'm trying to enable LDAPS. I don't understanrd what is cause error. Is anybody have an idea please? This almost always means that the slapd process cannot access one or more of the fil

superuser and normal user in OpenLdap services

2023-12-13 Thread Kaushal Shriyan
Hi, I am running the openldap server on Red Hat Enterprise Linux release 8.8 (Ootpa) # rpm -qa | grep -i ldap sssd-ldap-2.8.2-3.el8_8.x86_64 symas-openldap-servers-2.4.59-1.el8.x86_64 openldap-2.4.46-18.el8.x86_64 symas-openldap-2.4.59-1.el8.x86_64 symas-openldap-clients-2.4.59-1.el8.x86_64 # ca

RE: SSL certificate install

2023-12-13 Thread Jean-Luc Chandezon
> > You are missing "changetype: modify" > > this is how it should look > - > dn: cn=config > changetype: modify > add: olcTLSCertificateFile > olcTLSCertificateFile: /opt/symas/etc/openldap/example-net-cert.pem > - > add: olcTLSCertificateKeyFile > olcTLSCertificateKeyFile: /opt/syma

Re: SSL certificate install

2023-12-13 Thread Stefan Kania
Am 13.12.23 um 08:51 schrieb Jean-Luc Chandezon: Hello dear community, I’m trying to enable LDAPS. I don’t understanrd what is cause error. Is anybody have an idea please? OpenLDAP is 2.5.13, on Debian 12. Here is our certificate chain definition: dn: cn=config add: olcTLSCACertificateFi