From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pnz37@mail.ru>
Date: Mon, 18 Apr 2005 15:25:14 +0400
From: Anton Gorlov aka stalker <pnz37@mail.ru>
X-Mailer: The Bat! (v3.0.1.33) Professional
X-Priority: 3 (Normal)
Message-ID: <231799616.20050418152514@mail.ru>
To: ALT Linux Sisyphus discussion list <sisyphus@altlinux.ru>
MIME-Version: 1.0
Content-Type: text/plain; charset=Windows-1251
Content-Transfer-Encoding: quoted-printable
Subject: [sisyphus] SSH +ldap
X-BeenThere: sisyphus@altlinux.ru
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Anton Gorlov aka stalker <pnz37@mail.ru>,
	ALT Linux Sisyphus discussion list <sisyphus@altlinux.ru>
List-Id: ALT Linux Sisyphus discussion list <sisyphus.altlinux.ru>
List-Unsubscribe: <https://lists.altlinux.ru/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@altlinux.ru?subject=unsubscribe>
List-Archive: <http://lists.altlinux.ru/pipermail/sisyphus>
List-Post: <mailto:sisyphus@altlinux.ru>
List-Help: <mailto:sisyphus-request@altlinux.ru?subject=help>
List-Subscribe: <https://lists.altlinux.ru/mailman/listinfo/sisyphus>,
	<mailto:sisyphus-request@altlinux.ru?subject=subscribe>
X-List-Received-Date: Mon, 18 Apr 2005 11:27:19 -0000
Archived-At: <http://lore.altlinux.org/sisyphus/231799616.20050418152514@mail.ru/>
List-Archive: <http://lore.altlinux.org/sisyphus/>

=C7=E4=F0=E0=E2=F1=F2=E2=F3=E9=F2=E5, ALT.

=D5=EC... =F1=E3=E5=ED=E5=F0=E8=EB =F1=E5=F0=F2=E5=F4=E8=EA=E0=F2 =F1 =EF=
=EE=EC=EE=F9=FC=FE openssl. =CF=EE=EF=E8=F1=E0=EB =E5=E3=EE =E2 =ED=E0=F1=
=F2=F0=EE=E9=EA=E0=F5
=EB=E4=E0=EF=E0
TLSCertificateFile /etc/openldap/ssl/slapd.pem
TLSCertificateKeyFile /etc/openldap/ssl/slapd.pem
TLSVerifyClient never

=EF=EE=EF=FB=F2=E0=EB=F1=FF =E5=E3=EE =E7=E0=EF=F3=F1=F2=E8=F2=FC =E8 =EF=
=EE=EB=F3=F7=E8=EB =ED=E5=E7=E0=EF=F3=F1=EA=E0=E5=EC=EE=F1=F2=FC =EB=E4=E0=
=EF=E0:

openssl
req -new -x509 -days 365 -nodes -config slapd.cnf -out slapd.pem
-keyout slapd.pem

slapd.cnf
[ req ]
default_bits =3D 1024
encrypt_key =3D yes
distinguished_name =3D req_dn
x509_extensions =3D cert_type
prompt =3D no
[ req_dn ]
C=3DRU
ST=3DRussia
L=3DLinux
O=3DLinux LDAP
OU=3DLDAP SSL Key
CN=3Drcc.com.ru
emailAddress=3Dgorlov@bla-bla.bla
[ cert_type ]
nsCertType =3D server

[root@ring openldap]# service slapd start
Checking slapd configuration                 [ DONE ]
Adjusting environment for slapd:             [ DONE ]
Starting slapd service:                      [FAILED]

=C2 =EB=EE=E3=E0=F5 =EF=F0=E8 =FD=F2=EE=EC =ED=E8=F7=E5=E3=EE =ED=E5 =ED=E0=
=F8=B8=EB.

--=20
=D1 =F3=E2=E0=E6=E5=ED=E8=E5=EC,
 Anton                          mailto:pnz37@mail.ru