Re: cn=config TLS Configuration Problem

--On Wednesday, October 19, 2022 2:46 PM -0400 Timothy Stonis tim@stonis.com wrote:

This is what I tried:

sudo slapmodify -F /var/openldap/openldap-data/ -q -l [LDIF file]

The ldif file had:

dn: cn=config changetype: modify delete: olcTLSCertificateFile

delete: olcTLSCertificateKeyFile

The error was: "Available database(s) do not allow slapmodify"

Ok, I would suggest trying the following:

sudo slapmodify -F /var/openldap/openldap-data/ -n 0 -l mod.ldif

(or whatever for the filename)

so taht the database to be modified is explicitly called out (in this case, cn=config). This is usually necessary for cn=config based operations.

Regards, Quanah