Jerry:
You have the files, use them. You have to copy them into the appropriate directory on Solaris and the method to do this is described in the documents. I have never been able to get Netscape on Solaris to do what you described. I use the Windows version.
James Mckenzie
-----Original Message-----
From: Action Request System discussion list(ARSList) [mailto:[email protected]] On Behalf Of Jerry Niman
Sent: Friday, September 01, 2006 1:21 AM
To: [email protected]
Subject: AREA LDAP Authentication on Solaris using SSL
Dear listers who are not at BUW (and those who are and are checking their email!)
ARS 6.3
Solaris 8
I am currently using AREA LDAP successfully to authenticate ARS users to an LDAP tree fronting Novell E-Directory.
Everyone thinks it's marvellous.
However, the E-Directory team want to withdraw the unencrypted LDAP service, and require everyone to use LDAP over SSL. Fair enough, a very sensible thing to do.
The LDAP tree certificate doesn't go back to one of the trusted root certificate authorities, but is self signed. There is a RootCert.der certificate to be imported.
However, the AREA LDAP plug-in is based on the Netscape SDK, and requires a cert7.db and key3.db incorporating the credentials.
On Windows, I can do this by running version 4.7 of Netscape and opening the RootCert.der file.
This imports it and incorporates the credentials into the cert7.db and key3.db files.
This is explained at
http://listserv.rbugs.com/cgi-bin/wa.exe?A2=ind0402&L=arslist&P=R54534
However, if I try the same on Solaris, it doesn't work, and I can't seem to copy across the db files from Windows to Solaris - or at least Netscape on Solaris seems not to notice them.
Does anyone have any suggestions?
Jerry
Jerry Niman Tel +44 (0)161-247 1474
Head of Information Systems Email [EMAIL PROTECTED] the Manchester Metropolitan University Mobile +44 (0)7770 638104
Before acting on this email or opening any attachments you should read the Manchester Metropolitan University's email disclaimer available on its website http://www.mmu.ac.uk/emaildisclaimer
_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
