Overview#

PKI server uses an LDAP server as a backend to store the data and some of the server configuration. Currently the only supported LDAP server is 389 DS. Each PKI subsystem requires an DS instance. The DS instance can be shared among multiple subsystems and the subsystems will use separate backend databases. The DS instance can be local or remote.

Deployment Scenarios#

See DS Deployment Scenarios.

Instance#

See DS Instance Setup.

To restart DS instance:

$ systemctl restart dirsrv@pki-tomcat.service

DS Backend#

Connection#

Queries#

See PKI LDAP Queries.

References#