[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Mozilla NSS / OpenLdap 2.4.23 cert not readable?

To: openldap-technical@openldap.org
Subject: Re: Mozilla NSS / OpenLdap 2.4.23 cert not readable?
From: Jan Vcelak <jvcelak@redhat.com>
Date: Wed, 14 Dec 2011 14:53:52 +0100
Cc: Aaron Bennett <abennett@clarku.edu>, "richm@stanfordalumni.org" <richm@stanfordalumni.org>
In-reply-to: <1C4DF99260C2DC4383032F85493C75AA75C138F4E1@john.ad.clarku.edu>
References: <1C4DF99260C2DC4383032F85493C75AA75C138F4AB@john.ad.clarku.edu> <4EE65B12.5080100@gmail.com> <1C4DF99260C2DC4383032F85493C75AA75C138F4E1@john.ad.clarku.edu>
User-agent: KMail/1.13.7 (Linux/2.6.40.8-4.fc15.x86_64; KDE/4.6.5; x86_64; ; )

Hi Aaron,

On Monday 12 December 2011 21:16:27, Aaron Bennett wrote:
> >Also, please confirm that you are running slapd as the userid "ldap" and
> >that /etc/pki/nssdb is readable by "ldap".
> 
> - confirmed.  Slapd is running as userid ldap.
> - /etc/pki/nssdb is readable by "ldap": "sudo -u ldap certutil -L -n
> animal.clarku.edu -d /etc/pki/nssdb/" works as expected.

The error message comes from the initscript, it is not a slapd issue. If you 
believe that your configuration is correct, please, file a bug on 
http://bugzilla.redhat.com

Jan

References:
- Mozilla NSS / OpenLdap 2.4.23 cert not readable?
  - From: Aaron Bennett <abennett@clarku.edu>
- Re: Mozilla NSS / OpenLdap 2.4.23 cert not readable?
  - From: Rich Megginson <rich.megginson@gmail.com>
- RE: Mozilla NSS / OpenLdap 2.4.23 cert not readable?
  - From: Aaron Bennett <abennett@clarku.edu>

Prev by Date: Re: Bind as an authenticated user for fetching directory information
Next by Date: Re: SSL/TLS testing
Index(es):
- Chronological
- Thread