Hi everybody,

I would like to apologize me about this email discussion, in specially to Quanah and Howard. After a ton of emails sent, specially the last Quanah email, I've finally understood my error. Due it be a beginner error, I'm very embarrassed to importune you about it.

Then, I would like to apologize me with Quanah, Howard and everyone on openldap-technical@openldap.org list about time spent in this problem.

Finally, I would like thank all involved that has helped me to solve my problem.

OBS: I've removed -aes256 when I've generated server key aiming no encrypting the key. Then I've got to add all olcTLS* entries with ldapmodify and ldif file described in previous emails.

-- Igor Sousa

Em qui, 18 de jul de 2019 às 17:35, Quanah Gibson-Mount quanah@symas.com escreveu:

--On Thursday, July 18, 2019 1:08 PM -0700 Quanah Gibson-Mount quanah@symas.com wrote:

...

...

build@c7rpm:/home/build/git/rheldap/RHEL7_x86_64/BUILD...lapd Jul 18 11:55:29 localhost.localdomain slapd[2133]: main: TLS init def

ctx

...

...

failed: -1 Jul 18 11:55:29 localhost.localdomain slapd[2133]: Enter PEM pass

phrase:

...

This clearly indicates your key file is password protected, which is not supported.

To be clear, it's not supported to use a password protected key file and then try and start slapd via an automated init system such as systemd. To use a password protected key file requires that you start slapd manually so you can provide the password as part of the startup process so slapd can access it.

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com