[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Change over to anonymous binds

Rather than doing this, can I just add another certificate to the certificate file that has the correct settings or turn off ssl for just the cleint on the server? The problem is that my server is also my gateway and I need an actual name daemon on it. Every time I try to replace the localhost IP of the server with the FQDN I get all kinds of trouble. It will spontaneously drop to runlevel 3 on bootup for example or take several minutes to log anyone in. I've tried various means of testing this but all indications are that DNS is configured correctly.

Also, I cannot seem to make permanent alterations to the resolv.conf file. Every time I reboot it, it just goes back to what it was previously. I've even tried changeing settings in various files under /etc/sysconfig. No dice.

Tony Earnshaw wrote:

søn, 2002-08-18 kl. 13:56 skrev paul:

Clue please?


Use FQDN instead of 127.0.0.1. If your' using ssl with a self signed certificate, the HOST entry in ldap.conf should be the same as the CommonName field in the cert.


Seconded. What I'm doing now is known in Engish English as "picking up
fag ends" which means "picking up half smoked cigarette ends", which
means "picking up trails half way through", which is what I'm doing
here.

I don't use Solaris for ldap, but everything you describe and want,
works perfectly for me under Linux.

I have to have "localhost" in the certificates. Some things work if I
have "127.0.0.1", others not. "localhost." (note the dot) works in some
cases, some not. "localhost" works perfectly (no dot!).

I have a caching nameserver on a dialup connection. My domain is
billy.demon.nl, which isn't always on line. "localhost" gets translated
by my resolver to "localhost.demon.nl". If I don't have a DNS zone
"localhost.demon.nl" for which my node is authoritative, I have to wait
a   * l o n g *   time for every single thing I do.

So I don't just have the standard BIND zone localhost.zone, but I also
have billy.zone, which makes me authoritative for localhost.demon.nl .

Then there's absolutely no wait.

Best,

Tony