Red Hat DIRECTORY SERVER 8.0, Administration Manual, Page: 471 / 552

Step 5: Configure the Password Sync Service
453
• passhook.dll
• nsldap32v50.dll
• nsldapssl32v50.dll
• libplc4.dll
• nsldappr32v50.dll
• nss3.dll
• libnspr4.dll
• ssl3.dll
• libplds4.dll
• softokn3.dll
19.2.5. Step 5: Configure the Password Sync Service
Next, set up certificates that
Password Sync
will use to access the Directory Server over SSL:
NOTE
SSL is required for
Password Sync
to send password to Directory Server. The service
will not send the passwords except over SSL to protect the clear text password sent from
the Active Directory machine to the Directory Server machine.
1. Download
certutil.exe
if it is not already installed on the machine. It is available from
ftp://
ftp.mozilla.org/pub/mozilla.org/security/nss/releases/
. See
Chapter 11, Managing SSL
for more
information on SSL.
2. On the Directory Server, export the server certificate.
cd /usr/lib/dirsrv/slapd- instance_name
certutil -d . -L -n "CA certificate" -a > dsca.crt
3. Copy the exported certificate from the Directory Server to the Windows machine.
4. Open the
Password Sync
installation directory.
cd "C:\Program Files\Red Hat Directory Password Synchronization"
5. Create new
cert8.db
and
key.db
databases on the Windows machine.
certutil.exe -d . -N
6. Import the server certificate from the Directory Server into the new certificate database.
certutil.exe -d . -A -n "DS CA cert" -t CT,, -a -i \path\to\ dsca.crt