Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 315 / 866

Starting Certificate Management System
Chapter 8 Starting and Stopping CMS Instances 315
To configure the server to start by reading the single sign-on password from a file:
1.
Create a file named
pwfile
.
2.
Put the single sign-on password in the file.
3.
Copy the file to this directory:
<server_root>/cert-<instance_id>/config
4.
Edit the
start-cert
script.
To edit the
start-cert
script in Unix, follow these steps:
a.
Open a command-line window.
b.
Go to the CMS-instance directory.
For example,
/usr/netscape/server4/cert-testCA
.
c.
Enter the following line at the prompt:
cat start-cert
You should see something similar to this:
#!/bin/sh
/usr/netscape/server4/bin/cert/admin/bin/start -i testCA
-r /usr/netscape/server4 -e -classpath
/usr/netscape/server4/bin/cert/classes:/usr/netscape/
server4/bin/cert/jars/jss.jar:/usr/netscape/server4/bin/
cert/jars/certsrv.jar:usr/netscape/server4/java/
ldapjdk.jar:/usr/netscape/server4/bin/cert/jre/lib/
rt.jar:/usr/netscape/server4/bin/cert/jre/lib/i18n.jar:/
usr/netscape/server4/bin/cert/jars/jssjdk12.jar
CAUTION
The instructions that follow explain how to configure Certificate
Management System to start by reading the single sign-on password
from a file. Note that the password is stored in a plain text file and
you must use your operating system’s security feature to secure this
file. Failing to do so poses a security risk, as anyone who has access
to the host system will be able to get hold of the single sign-on
password.