Skip to content

Commit 90caa45

Browse files
committed
Update procedure for TLS for secure LDAP connection (#4257)
* Highlight important prerequisite * Add step to restart services * Update cert path (cherry picked from commit 09a150a)
1 parent 7b5b31e commit 90caa45

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

guides/common/modules/proc_configuring-tls-for-secure-ldap.adoc

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,8 @@
55

66
If {Project} uses TLS to establish a secure LDAP connection (LDAPS), you must obtain the CA certificates of your LDAP server and add them to the trusted CA list on the base operating system of your {ProjectServer}.
77

8-
If your LDAP server uses a certificate chain with intermediate certificate authorities, you must obtain all root and intermediate certificates and add them to the trusted CA list.
8+
.Prerequisite
9+
* If your LDAP server uses a certificate chain with intermediate certificate authorities, the trusted CA list must contain all root and intermediate certificates.
910

1011
.Procedure
1112
. Obtain the CA certificate from the LDAP Server:
@@ -31,7 +32,7 @@ ifdef::foreman-deb[]
3132
# cp /tmp/_example.crt_ /usr/local/share/ca-certificates
3233
endif::[]
3334
ifndef::foreman-deb[]
34-
# cp /tmp/_example.crt_ /etc/pki/tls/source/anchors
35+
# cp /tmp/_example.crt_ /etc/pki/ca-trust/source/anchors
3536
endif::[]
3637
----
3738
.. Update the certificate authority truststore:
@@ -46,6 +47,12 @@ ifndef::foreman-deb[]
4647
endif::[]
4748
----
4849
. Delete the downloaded LDAP certificate from the temporary location on your {ProjectServer}.
50+
. Restart {Project} services:
51+
+
52+
[options="nowrap", subs="+quotes,verbatim,attributes"]
53+
----
54+
# {foreman-maintain} service restart
55+
----
4956

5057
ifndef::orcharhino,foreman-deb[]
5158
.Additional resources

0 commit comments

Comments
 (0)