LDAP Access from Green Network

[mrmarkuz (Markus Neuberger)]

Did you work with the new server manager? There seems to be a bug that when choosing another default certificate the ldap server isn’t restarted and uses the old certificate.
It works with legacy server manager.

@Goomba

can someone point me in the right direction to change the default LDAP certificate?

As said easiest way is doing this with server manager.

The LDAP cert is stored here: /etc/pki/tls/certs/slapd.pem.

This certificate will be overwritten when you change certifcate in web UI.

So you may change the paths in LDAP directory to use another certificate:

[root@testserver ~]# ldapsearch -LLL -Y EXTERNAL -b cn=config olcTLSCertificateFile olcTLSCertificateKeyFile olcTLSCACertificateFile
...
olcTLSCACertificateFile: /etc/pki/tls/certs/slapd.pem
olcTLSCertificateFile: /etc/pki/tls/certs/slapd.pem
olcTLSCertificateKeyFile: /etc/pki/tls/certs/slapd.pem
...

Examples to edit LDAP directory can be found here.

@Goomba

Same question (how to I change the server presented by Nethserver when connecting to the LDAP server) for either OpenLDAP alone or running as a DC

The certificate for the DC is located in /var/lib/machines/nsdc/var/lib/samba/private/tls/

Here you can find documentation about adding letsencrypt cert to the DC container as an example:

Howto install NethServer as Samba AD domain controller v0.2

Installation guide NethServer Samba 4 AD server role V 0.1 - initial version V 0.2 - automated NSDC container cert renewal V 0.21- added note about installing nano instead of vi This manual explains how to boot the NethServer installation ISO and install NethServer with the Samba4 AD role. No special attention will be given to disk-layout or backup strategies. A vitual environment is assumed. If you will install NethServer on bare metal, you will need to rethink partitioning and backup st…