Red Hat Directory Server 8.0 Configuration, Command, and File Reference

Option Description
option, of the certificate database of the client.
This option is used only with the -Z option.
When used on a machine where an
SSL-enabled web browser is configured, the
path specified on this option can be that of the
certificate database for the browser. For
example:
-P /security/cert.db
The client security files can also be stored on
the Directory Server in the
/etc/dirsrv/slapd-instance_name
directory. In this case, the -P option would call
out a path and filename similar to the
following:
-P
/etc/dirsrv/slapd-instance_name/client-cert.db
-Q Specifies the token and certificate name,
which is separated by a semi-colon (:) for
PKCS11.
-W Specifies the password for the private key
database identified in the -P option. For
example:
-W serverpassword
If a dash (-) is used as the password value,
the utility promptes for the password after the
command is entered. This avoids having the
password on the command line.
-Z Specifies that SSL is to be used for the
search request.
-ZZ Specifies the Start TLS request. Use this
option to make a cleartext connection into a
secure one. If the server does not support
Start TLS, the command does not have to be
aborted; it will continue in cleartext.
-ZZZ Enforces the Start TLS request. The server
ldapsearch
203