04.06.2013 Views

UCS 2.4 - Univention

UCS 2.4 - Univention

UCS 2.4 - Univention

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

15.5 Changing machine passwords/SSL certificates during system start<br />

15.5 Changing machine passwords/SSL certificates during system start<br />

The univention-system-setup-appliance package is available for the operation of preconfigured <strong>UCS</strong><br />

installations. This offers the possibility of regenerating the SSL certificates and host passwords during the<br />

next system start.<br />

If the <strong>Univention</strong> Configuration Registry variable system/setup/appliance/start is set to true, the<br />

passwords in the /etc/ldap.secret and /etc/ldap-backup.secret files will be reset the next time<br />

that univention-system-setup-boot is run. In addition, the passwords for the join-slave and join-backup<br />

system users will also be reset.<br />

If ssl is set in the <strong>Univention</strong> Configuration Registry variable boot/setup/modules, the root cer-<br />

tificate and host certificates are regenerated the next time univention-system-setup-boot is started<br />

on a domain controller master. The settings for the new certificate are read out of the <strong>Univention</strong><br />

Configuration Registry variables ssl/country, ssl/email, ssl/locality, ssl/organization,<br />

ssl/organizationalunit and ssl/state.<br />

299

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!