Red Hat DIRECTORY SERVER 7.1 Configuration page 239

• to specify Directory Server's encrypted port.
-p
• to specify SSL.
-Z
• to specify your certificate database's filename and path.
-P
• to specify your certificate name.
-N
• to specify your private key database's filename and path.
-K
• to specify the password for your private key database.
-W
Option Description
Specifies the path, including the filename, of the private key database of the
-K
client. You may specify the absolute or relative (to the server root) path.
You must specify the -K option when the key database has a different name
than key3.db or when the key database is not under the same directory as
the certificate database, the cert8.db file (the path which is specified with
the -P option).
Specifies the path to the security module database. For example,
-m
/opt/redhat-ds/servers/secmod.db. You only need to specify this
option if the security module database is in a different directory than the
certificate database itself.
Specifies the certificate name to use for certificate-based client authentication.
-N
For example, -N "Server-Cert". If this option is specified, then the -Z, -P,
and -W options are required. Also, if this option is specified, then the -D and
-w options must not be specified, or certificate-based authentication will not
occur, and the bind operation will use the authentication credentials specified
on -D and -w.
Specifies the path, including the filename, of the certificate database of the
-P
client. You may specify the absolute or relative (to the server root) path. This
option is used only with the -Z option.
When used on a machine where an SSL-enabled web browser is configured,
the path specified on this option can be that of the certificate database for the
browser. For example:
-P /security/cert.db
The client security files can also be stored on the Directory Server in the
serverRoot/alias directory. In this case, the -P option would call out a path
and filename similar to the following:
-P /opt/redhat-ds/servers/alias/client-cert.db
Chapter 7 Command-Line Utilities
ldapsearch
239