Difference between revisions of "Turning off starttls for replication"

(Created page with "'''This document gather steps to update "olcSyncrepl" details in ldap config database ONLY in case of someone needs to disable starttls communication for replication. Please note...")
 
(Issue)
Line 2: Line 2:
  
 
==Issue==
 
==Issue==
If the replication is not working, even with correct starttls setup.
+
If the replication is not working, even with correct starttls setup. Or there is a need to disable TLS communication for replication.
  
 
==Steps==
 
==Steps==

Revision as of 21:30, 22 November 2011

This document gather steps to update "olcSyncrepl" details in ldap config database ONLY in case of someone needs to disable starttls communication for replication. Please note that you should be very careful in this process or you may break your ldap server.

Issue

If the replication is not working, even with correct starttls setup. Or there is a need to disable TLS communication for replication.

Steps

Modifying olcDatabase={2}hdb.ldif.

1. Open /opt/zimbra/data/ldap/config/cn=config/olcDatabase={2}hdb.ldif

2. Search for "starttls=critical" in the file and remove it.

4. Save the file and restart ldap on both master and replica.

  ldap stop; ldap start

5. Verify replication

Jump to: navigation, search