On 22/12/2016 14:08, Alexander Bokovoy wrote:
# accepted, but doesn't change the value of the attribute
So for now, I've set "nsslapd-allowed-sasl-mechanisms: GSSAPI
EXTERNAL". But that means this server is in a different config state
to its replica peers, which I wonder might bite me one day.
You can shut the server down (ipactl stop), change the value in the
config (/etc/dirsrv/slapd-INSTANCE/dse.ldif) and start the server again
Thank you. I looked in this file and the setting wasn't there! But a
bit more investigation showed that the following update *does* update
the config in dse.ldif:
However the doesn't become visible until you restart the server. Until
then, doing an ldapsearch on cn=config returns the previous value of
Anyway, all is good now.
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project