Setting up SSL with 389 Directory Server for LDAP authentication
- by GioMac
I've got 389 Directory Server running on RHEL 5 with groups, users, posix etc. RHEL clients are authenticating users with LDAP - no problems, everything works perfect, but passwords are sent in plaintext and are visible with network sniffer. So, decided to run with SSL:
Created CA - got both private and public CA certificates
Using CA certs: generated both of private and public certificates and combined (1st file) for 389DS according to 389DS certificate request, imported with CA public cert to 389DS from graphical console (2nd file).
Enabled SSL in 389DS
On the client, using authconfig-gtk enabled SSL for LDAP, specified only CA public certificate
Doesn't work.
Howto? What is the best way to integrate safely?