Thursday, October 1, 2009

How to auto-start SSL-enabled Directory Server?




I have a defense customer requesting for their Sun Directory Server 5.2 to be SSL-enabled. 

However, once the Directory Server 5.2 is started, one has to manually key in the Token Pin:

$ /ds/slapd-DEF/start-slapd
Internal (Software) Token: 

He doesn't like this. He wants the Directory Service to be started automatically upon system reboots.

Well, there is a workaround:

1. $ cd /ds/alias
2. $ vi slapd-DEF-pin.txt
3. Enter the following into the text file:
    Internal (Software) Token:mysecretpassword
4. $ chmod 600 slapd-DEF-pin.txt

Restart the Directory Server. You're done!


PS: Make sure the naming convention of the PIN file is strictly adhered to: 
       [directory-instance]-pin.txt

No comments:

Post a Comment