[Samba] DCs: Samba CA

Stefan G. Weichinger lists at xunil.at
Thu May 20 18:06:27 UTC 2021


Am 20.05.21 um 19:03 schrieb Kris Lou via samba:

> By default, Samba DC self-signed certificates have a 700-day lifespan.
> 
> Have you seen
> https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC
> ?
> 
> You'll have to either renew the self-signed cert via Samba (haven't tried
> it, backup/delete certs and restart samba:
> https://lists.samba.org/archive/samba/2017-February/206748.html), or manage
> the certs separately.
> 
> Either way, you'll have new files in /var/lib/samba/private/tls and will
> have to distribute accordingly.

Great, that worked right now, thanks! I didn't expect that to be so easy 
... thanks a lot.





More information about the samba mailing list