c0ff33d c0ff33d via FreeIPA-users wrote: > >> cn=Directory Manager is correct. dogtag uses client auth so bind DN is >> sent in the typical case either way. > > "Can also be correct" would be more accurate wouldn't it? > Default value for CentOS is the pkidbuser DN. I'd be surprised if the Fedora > packages were that different here. > >> The cert is not needed in the 389-ds cert database. It uses certmap.conf >> to map the cert that dogtag provides to an LDAP entry. > > With 'verifycert on' in certmap.conf by default the cert is certainly needed > in LDAP isn't it?
Correct, but not in the NSS database. rob _______________________________________________ FreeIPA-users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]/message/LP6BI2ONSWT37XO65V2VSR4GX3IA7HPY/
