Moin Mike, On Fri, Apr 12, 2019 at 11:52:25AM +0000, Mike Gabriel wrote: > I just tested a Debian Edu 10 installation against a Debian Edu 8 TJENER. > The LDAP certificate on the jessie TJENER had been created wrongly (subject: > CN=localhost, issuer: CN=localhost).
Maybe the SSL/TLS related changes would best be dealt with providing a jessie-pu/debian-edu-config package. (And maye for stretch-pu as well just in case someone installs a Buster workstation against a Stretch main server.) As a workaround copy these files from the Jessie main-server to the Buster workstation: (1) /etc/init.d/fetch-ldap-cert (2) /usr/bin/ldap-server-getcert (3) /etc/ldap/ldap.conf Then run 'service fetch-ldap-certrestart'. It should get this 8/10 combination working. Same should apply to a 9/10 combination. Please test. Wolfgang
signature.asc
Description: PGP signature
