Re: cn=config TLS Configuration Problem

[Quanah Gibson-Mount]

--On Wednesday, October 19, 2022 2:46 PM -0400 Timothy Stonis 
<t...@stonis.com> wrote:


This is what I tried:

  sudo slapmodify -F /var/openldap/openldap-data/ -q -l [LDIF file]

The ldif file had:

dn: cn=config
changetype: modify
delete: olcTLSCertificateFile
-
delete: olcTLSCertificateKeyFile
-

The error was: "Available database(s) do not allow slapmodify"

Ok, I would suggest trying the following:

sudo slapmodify -F /var/openldap/openldap-data/ -n 0 -l mod.ldif

(or whatever for the filename)

so taht the database to be modified is explicitly called out (in this case, 
cn=config).  This is usually necessary for cn=config based operations.


Regards,
Quanah