[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openldap-technical
Subject:    RE: SSL certificate install
From:       Jean-Luc Chandezon <jlch () lan-explore ! fr>
Date:       2023-12-15 10:45:52
Message-ID: PA4PR05MB780851FBB1B6C57D6F440828FA93A () PA4PR05MB7808 ! eurprd05 ! prod ! outlook ! com
[Download RAW message or body]


> 
> On debian, /etc/ssl/private is only readable by root and members of ssl-cert.
> 
> You ćan either add your openldap user to this group or move your certificate
> to /etc/ldap.
> 
> 
> Best regards
> 
> Ulf


Yes, and I believe it was different with Stretch version.
We checked permission with su on openldap account(temporarily replace /bin/false with \
/bin/bash), and solved issue.  
Thank you for your help!


[prev in list] [next in list] [prev in thread] [next in thread]