Howard Chu hyc@symas.com wrote:
Personally I would put ldap and apache into a group and make the key readable to that specific group.
Not that some programs will not accept that: sendmail insiste on the ket being mode 600, for instance. I had to copy the key in a second file.