eDirectory の SAS, SSL の修復

ConsoleOne より SAS object, SSL certificate IP, SSL certificate DNS を削除します。

NetWare では PKIDIAG と同じ機能を持ちます。

次のコマンドを実行します。

myserver:/etc/sysconfig # ndsconfig upgrade

[1] Instance at /etc/opt/novell/eDirectory/conf/nds.conf: myserver.OU=System.O=islandcenter.islandcenter

Upgrading Novell eDirectory server with the following parameters, Please wait...
Tree Name : islandcenter
Server DN : myserver.OU=System.O=islandcenter

Configuration File : /etc/opt/novell/eDirectory/conf/nds.conf
Instance Location : /var/opt/novell/eDirectory/data
DIB Location : /var/opt/novell/eDirectory/data/dib


Checking if server is ready to service requests... Done
Enter admin name with context[admin.org]:.admin.islandcenter
Enter the password for .admin.islandcenter:

Performing eDirectory health check... Done
For more details view health check logfile: /var/opt/novell/eDirectory/log/ndscheck.log

Extending schema... Done
For more details view schema extension logfile: /var/opt/novell/eDirectory/log/schema.log

Configuring HTTP service... Done
Configuring LDAP service... Done
Configuring SNMP service... Done
Configuring SAS service... Done
Associating certificate with the NCP server object... INFO: Server is already associated with a certificate.
Done
Configuring NMAS service... Done
Configuring SecretStore...
INFO: SecretStore extensions have already been added to the server.Done
Configuring LDAP Server with default SSL CertificateDNS certificate...
INFO: LDAP Server is already associated with SSL CertificateDNS certificate.
Done
Done
Triggering the 'External Reference Check' process... Done

The instance at /etc/opt/novell/eDirectory/conf/nds.conf is upgraded successfully.
myserver:/etc/sysconfig #
Commented by さんと at 2010-08-30 16:15 x
PKIDIAGのように証明書の有効期間を延ばしたいだけなら、KMOやSASを消さずに"ndsconfig upgrade"を実行するだけで、デフォルトの証明書の有効期間を延ばしてくれますね。
デフォルトの証明書(KMO)の有効期間が2年なのでうっかり失効して慌てたりすることが多々あります・・・
Commented by islandcenter at 2010-08-30 20:43
コメントありがとうございます。

こういうコマンドって、CUI ベースの YaST みたいに、目に優しい青い CUI インターフェースで作ってくれないかな、って必死に思います。
by islandcenter | 2010-08-27 15:53 | Comments(2)