Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-26 Thread Michael Lasevich
That did it. Thank you. On Thu, Sep 24, 2015 at 12:59 AM, Martin Kosek wrote: > Hello Michael, > > It is possible that this problem comes from obsolete package in the > mkosek/freeipa COPR repo, which was fixed in Fedora/RHEL, but not there. > > Can you please try to update the 389-ds-base from

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-24 Thread Martin Kosek
Hello Michael, It is possible that this problem comes from obsolete package in the mkosek/freeipa COPR repo, which was fixed in Fedora/RHEL, but not there. Can you please try to update the 389-ds-base from https://copr.fedoraproject.org/coprs/mkosek/freeipa/ ? I rebuilt the latest F21 389-ds-ba

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Michael Lasevich
I actually just posted that in a previous email. The only thing I cut out were nsSSLEnabledCiphers - but here is the complete listing: # ldapsearch -x -D "cn=directory manager" -W -b "cn=encryption,cn=config" Enter LDAP Password: # extended LDIF # # LDAPv3 # base with scope subtree # filter: (ob

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Martin Kosek
On 09/23/2015 05:05 PM, Michael Lasevich wrote: Yes, I am talking about 389ds as is integrated in FreeIPA (would be silly to post completely non-IPA questions to this list...). You would not be the first to do it :-) I am running FreeIPA 4.1.4 on CentOS 7.1 and RC4 is enabled on port 636 no m

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Michael Lasevich
No difference. It is as if this setting is being overwritten somewhere deep in 389ds, because the "error" log correctly reflects the changes, but the actual process does not. (and yes, I verified that the process actually shuts down and start up again when I restart it) ldapsearch -x -D "cn=direct

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Ludwig Krispenz
On 09/23/2015 05:05 PM, Michael Lasevich wrote: Yes, I am talking about 389ds as is integrated in FreeIPA (would be silly to post completely non-IPA questions to this list...). I am running FreeIPA 4.1.4 on CentOS 7.1 and RC4 is enabled on port 636 no matter what I do. I am running "CentOS Li

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Michael Lasevich
Yes, I am talking about 389ds as is integrated in FreeIPA (would be silly to post completely non-IPA questions to this list...). I am running FreeIPA 4.1.4 on CentOS 7.1 and RC4 is enabled on port 636 no matter what I do. I am running "CentOS Linux release 7.1.1503 (Core)" Relevant Packages: fre

Re: [Freeipa-users] How to turn off RC4 in 389ds???

2015-09-23 Thread Martin Kosek
On 09/23/2015 11:00 AM, Michael Lasevich wrote: > OK, this is most bizarre issue, > > I am trying to disable RC4 based TLS Cipher Suites in LDAPs(port 636) and > for the life of me cannot get it to work > > I have followed many nearly identical instructions to create ldif file and > change "nsSSL