Skip to content

Commit f9fccf7

Browse files
committed
Update procedure for TLS for secure LDAP connection (#4257)
* Highlight important prerequisite * Add step to restart services * Update cert path (cherry picked from commit 09a150a)
1 parent 65eb2af commit f9fccf7

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

guides/common/modules/proc_configuring-tls-for-secure-ldap.adoc

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33

44
If {Project} uses TLS to establish a secure LDAP connection (LDAPS), you must obtain the CA certificates of your LDAP server and add them to the trusted CA list on the base operating system of your {ProjectServer}.
55

6-
If your LDAP server uses a certificate chain with intermediate certificate authorities, you must obtain all root and intermediate certificates and add them to the trusted CA list.
6+
.Prerequisite
7+
* If your LDAP server uses a certificate chain with intermediate certificate authorities, the trusted CA list must contain all root and intermediate certificates.
78

89
.Procedure
910
. Obtain the CA certificate from the LDAP Server:
@@ -29,7 +30,7 @@ ifdef::foreman-deb[]
2930
# cp /tmp/_example.crt_ /usr/local/share/ca-certificates
3031
endif::[]
3132
ifndef::foreman-deb[]
32-
# cp /tmp/_example.crt_ /etc/pki/tls/source/anchors
33+
# cp /tmp/_example.crt_ /etc/pki/ca-trust/source/anchors
3334
endif::[]
3435
----
3536
.. Update the certificate authority truststore:
@@ -44,6 +45,12 @@ ifndef::foreman-deb[]
4445
endif::[]
4546
----
4647
. Delete the downloaded LDAP certificate from the temporary location on your {ProjectServer}.
48+
. Restart {Project} services:
49+
+
50+
[options="nowrap", subs="+quotes,verbatim,attributes"]
51+
----
52+
# {foreman-maintain} service restart
53+
----
4754

4855
ifndef::orcharhino,foreman-deb[]
4956
.Additional resources

0 commit comments

Comments
 (0)