Red Hat Directory Server B.08.00.02 for HP-UX Release Notes and Supplemental Instructions

6.5.2 Creating a Password File for the SSL Private Key Token
Use the following procedure to create a password file for the SSL private key token for the legacy
Directory Server. The migration script creates a copy of the file and installs it in the Red Hat
Directory Server 8.0 directory /etc/opt/dirsrv/slapd-instance.
1. Log in as root.
2. Stop the legacy Directory Server (the Directory Server that you are going to migrate) if you
have not stopped it.
3. Set the current working directory to the alias subdirectory in the server data directory
tree.
For 6.11 or 6.21 Directory Servers:
cd /var/opt/netscape/servers/alias
For 7.1 Directory Servers:
cd /var/opt/netscape/server7/alias
4. Create an empty file named slapd-instance—pin.txt:
touch ./slapd-instance-pin.txt
5. Write the password to the file. The format is as follows:
Internal (Software) Token:password
Where password is the password specified for the SSL private key when the certificate
request was created.
For example:
echo "Internal (Software) Token:password" > ./slapd-instance-pin.txt
6. Change the file owner to the Directory Server user (the System User specified in the
setup-ds-admin.pl session) On HP-UX systems, the default System User is www. For
example:
chown www ./slapd-instance-pin.txt
7. Change the file permission to allow only read access for the owner:
chmod 400 ./slapd-instance-pin.txt
For more information, see “Creating a Password File for the Directory Server” in the Red Hat
Directory Server 8.0 Administrator's Guide.
6.5.2.1 Deleting the Password File for the SSL Private Key Token
The password file for the SSL private key token contains the password in clear text. If you created
a password file for migration, HP recommends that you delete the legacy password file and the
Red Hat Directory Server 8.0 password file after you complete the migration.
The file locations are as follows:
• Legacy 6.11 or 6.21 Directory Servers:
/var/opt/netscape/servers/alias/slapd-instance-pin.txt
• Legacy 7.1 Directory Servers:
/var/opt/netscape/server7/alias/slapd-instance-pin.txt
• 8.0 Directory Servers (the migration script creates this file for you):
/etc/opt/dirsrv/slapd-instance/pin.txt
6.5 Additional Procedures for Migrating a Secure Directory Server 49