Changing The Internal Database Configuration - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

The Internal Database
• In Red Hat Console, you can distinguish an internal database instance from other
Directory Server instances. It is in this form:
<CS_instance_id>-db
<CS_instance_id>
specified this when you installed this server.
• If you check the files installed under
appears like this:
Keep in mind that the subsystems use the database for storing different objects. A
Certificate Manager stores all the data, certificate issuance requests, certificates, CRLs, and
related information; a Registration Manager only stores the certificate issuance requests it
receives; and a Data Recovery Manager only stores key records and related data.

Changing the Internal Database Configuration

To change the Directory Server instance that a CS instance uses as its internal database:
Log in to the CS console (see "Logging Into the CS Console" on page 239).
1.
Select the Configuration tab, and then in the right pane, select the Internal Database
2.
tab.
Change a Directory Server instance by changing the following fields:
3.
Host name. Type the fully qualified host name of the machine on which Red Hat
Directory Server is installed. CS uses this name to access the directory. The format for
the host name is as follows:
<machine_name>.<your_domain>.<domain>
By default, the host name of the Directory Server instance being used as the internal
database is shown as
certificates.example.com
database from being visible outside the system—that is, a server on
only be accessed from the local machine. Thus, the default configuration minimizes the
risk of someone connecting to this Directory Server instance from outside the local
machine.
You can configure the host name to something other than
what you are doing and you think you can limit the visibility of the internal database to
a local subnet. For example, if you installed CS and Directory Server on separate
machines for load balancing, you will have to specify the host name of the machine in
which Directory Server is installed.
282 Red Hat Certificate System Administrator's Guide • September 2005
is the ID of the CS instance that is using the database. You first
<server_root>
slapd-<CS_instance_id>-db
instead of the actual host name (for example,
localhost
). This is done on purpose to insulate the internal
, the internal database instance
localhost
if you know
localhost
can