edsysad.org » 10.5 Server http://edsysad.org another ed blogger.... Wed, 04 Apr 2012 03:46:48 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Adding SSL Support to OpenDirectory Replica http://edsysad.org/2008/10/31/adding-ssl-support-to-opendirectory-replica/ http://edsysad.org/2008/10/31/adding-ssl-support-to-opendirectory-replica/#comments Sat, 01 Nov 2008 00:24:11 +0000 Andrew Chlup http://edsysad.org/?p=28 While configuring our web filter, we realized that Apple’s default master/slave setup only allows LDAPS through the master server. This has some major limitations in regards to the usefulness of replicas. It turns out that one simple terminal command solves the problem.

sudo slapconfig -setldapconfig -ssl on -sslcert /etc/certificate/<your certificate>.crt -sslkey /etc/certificate/<your certificate>.key -ssldomain <server domain>

If there’s a way to do this through the GUI I couldn’t find it. Hope this helps somebody else out there.

]]> http://edsysad.org/2008/10/31/adding-ssl-support-to-opendirectory-replica/feed/ 0