Bug 164804 - /tmp/ssl_enable.ldif tries to modify non-existing cn=RSA,cn=encryption,cn=config
Summary: /tmp/ssl_enable.ldif tries to modify non-existing cn=RSA,cn=encryption,cn=config
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: 389
Classification: Retired
Component: wiki
Version: 7.1
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nathan Kinder
QA Contact: Chandrasekar Kannan
URL: http://directory.fedora.redhat.com/wi...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-08-01 16:00 UTC by Darren Fulton
Modified: 2015-01-04 23:19 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-06-06 18:10:00 UTC
Embargoed:


Attachments (Terms of Use)

Description Darren Fulton 2005-08-01 16:00:20 UTC
Description of problem:
Documentation for enabling SSL for Fedora DS at
http://directory.fedora.redhat.com/wiki/Howto:SSL includes instructions for
creating an LDIF file at /tmp/ssl_enable.ldif.  That file contains a section
that reads:

dn: cn=RSA,cn=encryption,cn=config
changetype: modify
add: nsSSLPersonalitySSL
nsSSLPersonalitySSL: Server-Cert

That means to modify the dn: cn=RSA,cn=encryption,cn=config.  That section does
not exist in the directory and running the ldif generates errors.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.  Install DS
2.  Follow steps in Fedora-DS Samba How-to
3.  Follow steps in Fedora-DS SSL How-to
4.  It breaks when running the /tmp/ssl_enable.ldif due to "cn=RSA" not existing
Actual results:


Expected results:


Additional info:

Comment 1 Darren Fulton 2005-08-03 13:22:49 UTC
Adam S. posted this to the Fedora DS Users mailing list:

Thanks for pointing that out please create an ldif /tmp/addrsa.ldif and
have the following :

dn: cn=RSA,cn=encryption,cn=config
objectclass: top
objectclass: nsEncryptionModule
cn: RSA
nsSSLPersonalitySSL: Server-Cert
nsSSLToken: internal (software)

Use ldapadd to add the entry into the directory server.. Ill fix the
how-to now as well  :) 

adam

Comment 2 To Ngan 2005-08-05 16:48:26 UTC
Changed component to wiki

Comment 3 Nathan Kinder 2005-08-16 20:19:12 UTC
Adam has fixed this on the wiki site.

Comment 4 Anh Nguyen 2007-11-27 22:00:10 UTC
I cleared the QA whiteboard for now.


Note You need to log in before you can comment on or make changes to this bug.