Changes between Version 10 and Version 11 of ldapiam2018
- Timestamp:
- Sep 12, 2018, 1:56:11 PM (6 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ldapiam2018
v10 v11 153 153 sudo cp /etc/ssl/certs/ca_server.pem /etc/ldap/ca_certs.pem 154 154 }}} 155 Now, we can adjust the system-wide configuration file for the OpenLDAP utilities. Open up the configuration file in your text editor with sudo privileges: 155 You should now check your connections to use STARTTLS by passing the '''-Z''' option when using the OpenLDAP utilities. You can force STARTTLS upgrade by passing it twice. Test this by typing: 156 {{{ 157 ldapwhoami -H ldap:// -x -ZZ 158 }}} 159 This forces a STARTTLS upgrade. If this is successful, you should see: 160 {{{ 161 anonymous 162 }}} 163 As we haven't configure the client-side you should see an '''error''' 164 165 Now, lets adjust the system-wide configuration file for the OpenLDAP utilities. Open up the configuration file in your text editor with sudo privileges: 156 166 {{{ 157 167 sudo nano /etc/ldap/ldap.conf … … 164 174 Save and close the file. 165 175 166 You should now be able to upgrade your connections to use STARTTLS by passing the '''-Z''' option when using the OpenLDAP utilities. You can force STARTTLS upgrade by passing it twice. Test thisby typing:176 Test STARTTTLS again by typing: 167 177 {{{ 168 178 ldapwhoami -H ldap:// -x -ZZ 169 179 }}} 170 This forces a STARTTLS upgrade. If this is successful, you should see: 171 {{{ 172 STARTTLS success 173 180 Now you should see: 181 {{{ 174 182 anonymous 175 183 }}}