Novell LINUX ENTERPRISE SERVER 11 - DEPLOYMENT, Руководство по развертыванию, Страница: 131 / 322

Interactive
Use
ask
to open a pop-up menu where you can specify the path to the certifi-
cate. Do not use this option with AutoYaST. Example
ask
Deactivate certificate installation
Use
done
if either the certificate will be installed by an add-on product, or if
you are using a certificate issued by an official certificate authority. Example:
done
Online Update
If the Registration was successful, and updates are available, select whether to perform
a YaST online update. If there are any patched packages available on the servers,
download and install them now to fix known bugs or security issues. For detailed in-
structions see Chapter 1, YaST Online Update (↑Administration Guide). Directives on
how to perform an online update in the installed system are available at
Section 9.4,
“Keeping the System Up-to-date” (page 149) or Chapter 1, YaST Online Update (↑Ad-
ministration Guide). This step is skipped if no updates are available or if you haven't
registered.
Services
After testing the Internet connection and downloading the first updates, a dialog opens
in which to enable and configure two important network services.
CA Management
The purpose of a CA (certificate authority) is to guarantee a trust relationship among
all network services communicating with each other. Without a CA, you can secure
server communications with SSL and TLS separately for each individual service.
By default, a CA is created and enabled during the installation. Find details about
the creation of a CA with YaST in Chapter 17, Managing X.509 Certification
(↑Security Guide).
OpenLDAP Server
You can run an LDAP service on your host to have a central facility manage a
range of configuration files. Typically, an LDAP server handles user account data,
but with SUSE Linux Enterprise Server it can also be used for mail, DHCP, and
Installation with YaST 119