Rob,
> This step is needed for very old IPA installations.
As usual, thank you for taking the time to respond!
John DeSantis
Il giorno gio 29 lug 2021 alle ore 11:37 Rob Crittenden via
FreeIPA-users ha scritto:
>
> John Desantis wrote:
> > Hello all,
> >
> >> The PKCS#12 file of the CA root
John Desantis wrote:
> Hello all,
>
>> The PKCS#12 file of the CA root generated by IPA during installation is
>> protected by the DM password.
>>
>> An updated file can be generated using PKCS12Export if desired.
>>
>
> Is this step actually required when changing the directory manager
>
Hello all,
> The PKCS#12 file of the CA root generated by IPA during installation is
> protected by the DM password.
>
> An updated file can be generated using PKCS12Export if desired.
>
Is this step actually required when changing the directory manager
password
Ian Pilcher via FreeIPA-users wrote:
> On 5/20/21 7:52 AM, Rob Crittenden via FreeIPA-users wrote:
>> Florence Renaud via FreeIPA-users wrote:
>>> Hi Ian,
>>> with IPA 4.6.8 you just need to follow the 389ds doc.
>>> The procedure was more complex in version < 3.2.2 because there were two
>>>
On 5/20/21 7:52 AM, Rob Crittenden via FreeIPA-users wrote:
Florence Renaud via FreeIPA-users wrote:
Hi Ian,
with IPA 4.6.8 you just need to follow the 389ds doc.
The procedure was more complex in version < 3.2.2 because there were two
389ds instances (one for the regular suffix and one for the
Florence Renaud via FreeIPA-users wrote:
> Hi Ian,
> with IPA 4.6.8 you just need to follow the 389ds doc.
> The procedure was more complex in version < 3.2.2 because there were two
> 389ds instances (one for the regular suffix and one for the Certificate
> Server) and the password has to be
Hi Ian,
with IPA 4.6.8 you just need to follow the 389ds doc.
The procedure was more complex in version < 3.2.2 because there were two
389ds instances (one for the regular suffix and one for the Certificate
Server) and the password has to be manually synchronized between the 2, and
the replica