Open datadavev opened 2 years ago
This change was implemented on cn-sandbox
2021-10-26 as the DataONE signed certificate had expired.
After editing slapd.conf
, slapd
was restarted and normal operations resumed.
Stage and production are not yet done.
I reconfigured cn-stage-ucsb/orc-1 and restart ldap server. It seems working.
We may need to put the production cns into read-only mode to make changes.
The code in cn-buildout needs to be adjusted as well.
slapd
is configured to use server certificates signed by the DataONE CA. This was necessary back in the day becauseslapd
does not work with wild card certificates.Action: Edit
/etc/ldap/slapd.conf
, example for sandbox: