2.3. Software Requirements
Most of the packages that an IdM server depends on are installed as dependencies when the IdM packages are installed. There are some packages, however, which are required before installing the IdM packages:
- Kerberos 1.10. This is installed as a dependency if it is not already installed.
- The bind and bind-dyndb-ldap packages for DNS. The bind package is installed as a dependency if it is not already available; however, the bind-dyndb-ldap package must be explicitly installed first or attempting to configure an IdM server with DNS support will fail.
Important
Due to CVE-2014-3566, the Secure Socket Layer version 3 (SSLv3) protocol needs to be disabled in the
mod_nss
module. You can ensure that by following these steps:
- Edit the
/etc/httpd/conf.d/nss.conf
file and set theNSSProtocol
parameter toTLSv1.0
(for backward compatibility) andTLSv1.1
.NSSProtocol TLSv1.0,TLSv1.1
- Restart the
httpd
service.# service httpd restart