I tried

FDS User wrote:

Below is the ls and grep output.

[root@ldap slapd-ldap]# ls -al /opt/fedora-ds/alias
total 644
drwxr-xr-x 2 nobody nobody   4096 May 7 18:29 .
drwxr-xr-x 15 root   root     4096 May 7 18:28 ..
-r-------- 1 nobody nobody   2092 May 7 18:29 adminserver.p12
-rw------- 1 nobody nobody 65536 May 9 10:21 admin-serv-ldap-cert8.db
-rw------- 1 nobody nobody 16384 May 9 10:21 admin-serv-ldap-key3.db
-rw-r--r-- 1 root   root      619 May 7 18:29 cacert.asc
-rwxr-xr-x 1 root   nobody 347368 Dec 4 17:27 libnssckbi.so
-r-------- 1 nobody nobody     41 May 7 18:29 noise.txt
-r-------- 1 nobody nobody     50 May 7 18:29 password.conf
-r-------- 1 nobody nobody     41 May 7 18:29 pwdfile.txt
-rw------- 1 nobody nobody 16384 May 10 13:19 secmod.db
-rw------- 1 nobody nobody 65536 May 7 18:29 slapd-ldap-cert8.db
-rw------- 1 nobody nobody 65536 May 7 18:28 slapd-ldap-cert8.db.bak
-rw------- 1 nobody nobody 16384 May 7 18:29 slapd-ldap-key3.db
-rw------- 1 nobody nobody 16384 May 7 18:28 slapd-ldap-key3.db.bak
-r-------- 1 nobody nobody     67 May 7 18:29 slapd-ldap-pin.txt

[root@ldap slapd-ldap]# ls -al /opt/fedora-ds/admin-serv/config
total 84
drwxr-xr-x 2 nobody nobody 4096 May 9 10:31 .
drwxr-xr-x 8 root   root    4096 May 9 10:32 ..
-rw------- 1 nobody nobody   544 May 10 13:17 adm.conf
-rw------- 1 nobody nobody    39 May 7 18:28 admpw
-rw------- 1 root   root    4598 May 7 18:28 admserv.conf
-rw------- 1 nobody nobody 3702 May 10 13:17 console.conf
-rw------- 1 root   root   26784 May 7 18:28 httpd.conf
-rw-r--r-- 1 root   root   19233 May 7 18:28 local.conf
-r-------- 1 nobody nobody 4604 May 7 18:29 nss.conf

[root@ldap slapd-ldap]# grep NSS /opt/fedora-ds/admin-serv/config/console.conf
NSSEngine on
NSSNickname server-cert
#   The NSS security database directory that holds the certificates and
NSSCertificateDatabase /opt/fedora-ds/alias
NSSDBPrefix admin-serv-ldap-
NSSCipherSuite +des,+rc2export,+rc4export,+desede3,+rc4,+rc2,+rsa_rc2_40_md5,+rsa_rc4_128_md5,+rsa_3des_sha,+rsa_rc4_40_md5,+fips_des_sha,+fips_3des_sha,+rsa_des_sha,-rsa_null_md5
NSSVerifyClient none

Richard Megginson wrote:
FDS User wrote:

Hi,
I am getting "PSET failure: PSET attribute creation or local cache update failed" when I try to enable SSL for admin server using the encryption tab.
I have used it in the past without issues and now for some reason I get this error after doing a re-install of fds.
I used the SSL script from the fds site to generate the certs.

Admin server log has this error:
[error] SSL Library Error: -12271 SSL client cannot verify your certificate

Any help is highly appreciated.

ls -al /opt/fedora-ds/alias
ls -al /opt/fedora-ds/admin-serv/config

grep NSS /opt/fedora-ds/admin-serv/config/console.conf

Thanks.

--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
  
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
  