Questo contenuto non è disponibile nella lingua selezionata.
35.2. Configuring the Directory Server Component
To configure DS automatically using the
ldapmodify
utility:
- Use
ldapmodify
to make the configuration changes for you:ldapmodify -h localhost -p 389 -D 'cn=directory manager' -W << EOF dn: cn=encryption,cn=config changeType: modify replace: sslVersionMin sslVersionMin: TLS1.2 EOF
ldapmodify -h localhost -p 389 -D 'cn=directory manager' -W << EOF dn: cn=encryption,cn=config changeType: modify replace: sslVersionMin sslVersionMin: TLS1.2 EOF
Copy to Clipboard Copied! - Restart DS to load the new configuration:
systemctl restart dirsrv@EXAMPLE-COM.service
# systemctl restart dirsrv@EXAMPLE-COM.service
Copy to Clipboard Copied!
To configure Directory Server (DS) manually:
- Stop DS:
systemctl stop dirsrv@EXAMPLE-COM.service
# systemctl stop dirsrv@EXAMPLE-COM.service
Copy to Clipboard Copied! - Open the
/etc/dirsrv/slapd-EXAMPLE-COM/dse.ldif
file, and modify thecn=encryption,cn=config
entry to set the following:sslVersionMin: TLS1.2
sslVersionMin: TLS1.2
Copy to Clipboard Copied! - Start DS:
systemctl start dirsrv@EXAMPLE-COM.service
# systemctl start dirsrv@EXAMPLE-COM.service
Copy to Clipboard Copied!
Important
Make sure you shut down the server first before editing the
dse.ldif
file manually. DS reads this file only once at startup, therefore any manual changes while the server is running will be lost if the configuration changes through LDAP. Editing the dse.ldif
file is recommended only for changes to attributes which cannot be altered dynamically.