openshift / openldap

Apache License 2.0
32 stars 59 forks source link

Enable LDAPS #2

Closed stevekuznetsov closed 6 years ago

stevekuznetsov commented 9 years ago

Add support for TLS/SSl for LDAPS over poer 686. Most likely done with blind-mounting the certs to etc/openldap/certs and updating the database with the following ldif:

dn: cn=config
changetype: modify
add: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/openldap/certs/ca-bundle.crt
-
replace: olcTLSCertificateFile
olcTLSCertificateFile: /etc/openldap/certs/server.crt
-
replace: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/openldap/certs/server.key