5.1.3 Importing Active Directory or eDirectory Certificates on RHEL or SLES Servers

For importing certificates on RHEL server:

  1. Copy the rootCA.cer certificate file to /etc/pki/ca-trust/source/anchors/ directory.

  2. Run the update-ca-trust extract command to update the system certificates.

For importing certificates on SLES server:

  1. Copy the rootCA.cer certificate file to /etc/pki/trust/anchors directory.

  2. Run the update-ca-certificates command to update the system certificates.

NOTE:If you are using an older version of the operating system, use the below commands:

  1. The LDAP CA certificate must be placed in the /etc/ssl/certs/ folder

  2. Run command c_rehash.

The c_rehash command is deprecated in newer versions of Linux operating system.

HINT:In case you face any issue, ensure that host names used in certificates are resolvable from your PAM manager server to the target LDAP server.