Re: Connect Solaris ldapclient to a Oracle internet directory

From: Chris Ridd <>
Date: Thu, 3 Jul 2008 11:56:36 +0100
Message-ID: <>

On 2008-07-03 10:00:22 +0100, Denis <> said:

> ldapclient connects to the OID. Yippi :-)
> It was a combination between nsswich.conf pam.conf and ldapclient.
> Thanks for all your help so far.
> I have found some more good resources:
> Now I would like to use SSL. The Solaris client needs PKCS12 formated
> key.db files. My problem is to get this keys in the right format.

You need Sun's directory server resource kit, which includes the "certutil" tool which will sort all this stuff out for you. I had to do something like this:

# LD_LIBRARY_PATH=/opt/dsrk52/lib:/opt/dsrk52/lib/nss/lib
# /opt/dsrk52/lib/nss/bin/certutil –A –n "My CA" -t "TCu,Cu,Tuw" -d 
/tmp –i ~/myca.crt

Test with Sun's ldapsearch program using LDAPS and the files generated in /tmp:

/usr/bin/ldapsearch –h –Z –b "" -s base –P /tmp "(objectclass=*)"

Then, copy the cert7.db and key3.db files from /tmp into /var/ldap and chmod them to 0444.


Chris Received on Thu Jul 03 2008 - 05:56:36 CDT

Original text of this message