56817c9355
It sets up 389 Directory Server, including a TLS cert acquired using Let's Encrypt in production (that requires ldap.kosmos.org pointing to the server's IP)
27 lines
466 B
Plaintext
27 lines
466 B
Plaintext
dn: cn=config
|
|
changetype: modify
|
|
replace: nsslapd-security
|
|
nsslapd-security: on
|
|
|
|
dn: cn=encryption,cn=config
|
|
changetype: modify
|
|
replace: nsSSLSessionTimeout
|
|
nsSSLSessionTimeout: 0
|
|
-
|
|
replace: nsSSLClientAuth
|
|
nsSSLClientAuth: off
|
|
-
|
|
replace: nsSSL3
|
|
nsSSL3: off
|
|
-
|
|
replace: nsSSL2
|
|
nsSSL2: off
|
|
|
|
dn: cn=RSA,cn=encryption,cn=config
|
|
objectClass: top
|
|
objectClass: nsEncryptionModule
|
|
nsSSLPersonalitySSL: Server-Cert
|
|
nsSSLActivation: on
|
|
nsSSLToken: internal (software)
|
|
cn: RSA
|