This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Credential Vault is not configuring without certificate in PAM 4.0

prasenjitmass over 3 years ago

Hi, We have installed PAM 4.0 in our environment. During configuration of Credential Vault (eDir) system is asking for Import CA certificate in Primary and secondary Framework manager.

Anyone please suggest how to collect this certificate and which location of PAM it needed to place, so that credential vault would be configure successfully and user can login.

0 tdharris over 3 years ago

For details, please see Support for Verifying Certificate Authority Certificates.
Cancel
Vote Up 0 Vote Down

Cancel
0 prasenjitmass over 3 years ago in reply to tdharris

Hi tdharris,
Thanks for replying. As I have go through the link and tried to copy exact ORG CA certificate, but system showing error after running cm c_rehash.
Let me know which eDirectory certificate we need to copy.

Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 tdharris over 3 years ago in reply to prasenjitmass

The certificate you will want to import is the eDirectory Certificate Authority (CA). So not a server certificate, but preferably the Organization CA so that any generated/renewed server certificates will be trusted. Please refer to Exporting the Organization CA's Self-Signed Certificate for more details. This certificate usually has a much longer validity than other server certificates.

c_rehash is an OS-provided tool that I believe comes from OpenSSL. So the opensource tool is stating there is no found certificate in the file provided in /etc/ssl/certs. Try with the Organizational CA as exported above.
Cancel
Vote Up 0 Vote Down

Cancel
0 Norbert Klasen over 3 years ago in reply to prasenjitmass
OpenSSL needs the files to be in PEM format - not DER.

Instead of c_rehash you should be using the tools provided by your Linux distribution:

update-ca-certificates for SUSE

update-ca-trust for REDHAT

See their man pages for more details.
Cancel
Vote Up 0 Vote Down

Cancel

Menu

PAM User Discussions

Credential Vault is not configuring without certificate in PAM 4.0

Resources