Netscape DIRECTORY SERVER 6.01 Configuration Manual page 213

SSL options
You can use the following command-line options to specify that
use LDAP over SSL (LDAPS) when communicating with your Directory Server.
LDAPS encrypts data during transit. You also use these options if you want to use
certificate-based authentication. These options are valid only when SSL has been
turned on and configured for your Directory Server. For more information on
certificate-based authentication and on creating a certificate database for use with
LDAP clients, see Chapter 11, "Managing SSL" in the Netscape Directory Server
Administrator's Guide.
Make sure that you specify your Directory Server's encrypted port when you use
these options:
-K Specifies the name of the certificate key used for certificate-based client
authentication. For example, -K Server-Key.
-N Specifies the certificate name to use for certificate-based client authentication.
For example, -N Server-Cert. If this option is specified, then the -Z, and
-W options are required. Also, if this option is specified, then the -D and -w
options must not be specified, or certificate-based authentication will not
occur and the bind operation will use the authentication credentials specified
on -D and -w.
-P Specifies the path and filename of the security files for the client. This option is
used only with the -Z option. When used on a machine where a SSL-enabled
web browser is configured, the path specified on this option can be pointed to
the security database for the web browser. For example, -P
c:\security\cert.db. You can also store the client security files on the
Directory Server in the /usr/netscape/servers/alias directory. In this
case, the -P option calls out a path and filename similar to the following:
-P c:\Netscape\Suitespot\alias\client-cert.db
-W Specifies the password for the certificate database identified on the -P option.
For example, -W serverpassword.
-Z Specifies that SSL is to be used for the directory request.
Additional ldapmodify options
The following options offer additional functionality:
ldapmodify
Chapter 7 Command-Line Utilities
ldapmodify
is to
213