Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 430016

Summary:	replication should use ssl
Product:	[Retired] freeIPA	Reporter:	Chandrasekar Kannan <ckannan>
Component:	ipa-server	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	Chandrasekar Kannan <ckannan>
Severity:	high	Docs Contact:
Priority:	high
Version:	1.0	CC:	benl, mgregg, rcritten, ssorce, yzhang
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	freeipa-2.0.0-1.fc15	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	246164, 429034

Description Chandrasekar Kannan 2008-01-24 06:52:22 UTC

Ticket #116 (new defect)

Opened 2 months ago
replication should use ssl
Reported by: 	kmacmill 	Assigned to: 	kmacmill
Priority: 	major 	Milestone: 	release-1
Component: 	documentation 	Version: 	
Keywords:

Comment 3 Rob Crittenden 2008-01-31 20:49:08 UTC

It looks like Karl added SSL to replication. The CA is copied to the replica and
we setup the agreement with:

nsds5replicatransportinfo: SSL

I think this is ready for testing.

Comment 4 Yi Zhang 2008-04-04 23:05:17 UTC

qa verified. bug closed

build: 4-4-08 daily build

ldap access log msg as below: 

[04/Apr/2008:15:44:42 -0700] conn=8 fd=69 slot=69 SSL connection from
172.16.142.140 to 172.16.142.161
[04/Apr/2008:15:44:42 -0700] conn=8 SSL 256-bit AES
[04/Apr/2008:15:44:42 -0700] conn=8 op=0 BIND dn="cn=replication
manager,cn=config" method=128 version=3
[04/Apr/2008:15:44:42 -0700] conn=8 op=0 RESULT err=0 tag=97 nentries=0 etime=0
dn="cn=replication manager,cn=config"
[04/Apr/2008:15:44:42 -0700] conn=8 op=1 SRCH base="" scope=0
filter="(objectClass=*)" attrs="supportedControl supportedExtension"