Chapter 8. Installing an IdM server or replica with custom Directory Server and certificate authority settings from LDIF and INI files

Procedure

1. Create a text file in LDIF format with your custom DS settings. Separate LDAP attribute modifications with a dash (-). This example sets non-default values for the idle timeout and maximum file descriptors.

   dn: cn=config
   changetype: modify
   replace: nsslapd-idletimeout
   nsslapd-idletimeout: 1800
   -
   replace: nsslapd-maxdescriptors
   nsslapd-maxdescriptors: 8192

2. Use the --dirsrv-config-file parameter to pass the LDIF file to the installation script.

   1. To install an IdM server:

      # ipa-server-install --dirsrv-config-file <filename.ldif>

   2. To install an IdM replica:

      # ipa-replica-install --dirsrv-config-file <filename.ldif>

Procedure

1. Create a text file in INI format with your custom CA settings. Write each parameter on a new line. This example sets the CA signing key size to 4096 bits.

   [CA]
   pki_ca_signing_key_size=4096

2. Use the --pki-config-override parameter to pass the INI file to the installation script.

   1. To install an IdM server:

      # ipa-server-install --pki-config-override <pkiconfig.ini>

   2. To install an IdM replica:

      # ipa-replica-install --pki-config-override <pkiconfig.ini>