forked from docs/doc-exports
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
122 lines
21 KiB
HTML
122 lines
21 KiB
HTML
<a name="mrs_01_24109"></a><a name="mrs_01_24109"></a>
|
|
|
|
<h1 class="topictitle1">Interconnecting ClickHouse With OpenLDAP for Authentication</h1>
|
|
<div id="body0000001156335241"><p id="mrs_01_24109__p0620195241914">ClickHouse can be interconnected with OpenLDAP. You can manage accounts and permissions in a centralized manner by adding the OpenLDAP server configuration and creating users on ClickHouse. You can use this method to import users from the OpenLDAP server to ClickHouse in batches.</p>
|
|
<p id="mrs_01_24109__p1921583652320">This section applies only to MRS 3.1.0 or later.</p>
|
|
<div class="section" id="mrs_01_24109__section102118389113"><h4 class="sectiontitle">Prerequisites</h4><ul id="mrs_01_24109__ul163207376185"><li id="mrs_01_24109__li5321153714182">The MRS cluster and ClickHouse instances are running properly, and the ClickHouse client has been installed.</li><li id="mrs_01_24109__li15548138121815">OpenLDAP has been installed and is running properly.</li></ul>
|
|
</div>
|
|
<div class="section" id="mrs_01_24109__section131691552132813"><h4 class="sectiontitle">Creating a ClickHouse User for Interconnecting with the OpenLDAP Server</h4><ol id="mrs_01_24109__ol19636454192914"><li id="mrs_01_24109__li142891246133812"><span>Log in to Manager and choose <strong id="mrs_01_24109__b1828618111010">Cluster</strong> > <strong id="mrs_01_24109__b15341818181018">Services</strong> > <strong id="mrs_01_24109__b19346185105">ClickHouse</strong>. Click the <strong id="mrs_01_24109__b7341218131014">Configurations</strong> tab and then <strong id="mrs_01_24109__b133411182108">All Configurations</strong>.</span></li><li id="mrs_01_24109__li1720414673914"><span>Choose <strong id="mrs_01_24109__b152381912154112">ClickHouseServer(Role)</strong> > <strong id="mrs_01_24109__b1843132074112">Customization</strong>, and add the following OpenLDAP configuration parameters to the <strong id="mrs_01_24109__b16420114218417">clickhouse-config-customize</strong> configuration item.</span><p>
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="mrs_01_24109__table15801195914519" frame="border" border="1" rules="all"><caption><b>Table 1 </b>OpenLDAP parameters</caption><thead align="left"><tr id="mrs_01_24109__row7801145919453"><th align="left" class="cellrowborder" valign="top" width="33.33333333333333%" id="mcps1.3.4.2.2.2.1.2.4.1.1"><p id="mrs_01_24109__p148019592453">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="40.41404140414041%" id="mcps1.3.4.2.2.2.1.2.4.1.2"><p id="mrs_01_24109__p680117598455">Description</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="26.25262526252625%" id="mcps1.3.4.2.2.2.1.2.4.1.3"><p id="mrs_01_24109__p118011859114513">Example Value</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="mrs_01_24109__row13801175934513"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p19801115954515">ldap_servers.ldap_server_name.host</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="40.41404140414041%" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p14801145912451">OpenLDAP server host name or IP address. This parameter cannot be empty.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.25262526252625%" headers="mcps1.3.4.2.2.2.1.2.4.1.3 "><p id="mrs_01_24109__p980145914455">localhost</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_24109__row655142414474"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p35502412479">ldap_servers.ldap_server_name.port</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="40.41404140414041%" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p16573201411597">OpenLDAP server port number.</p>
|
|
<p id="mrs_01_24109__p99481216549">If <strong id="mrs_01_24109__b759585016439">enable_tls</strong> is set to <strong id="mrs_01_24109__b1879955113439">true</strong>, the default port number is <strong id="mrs_01_24109__b0349185654316">636</strong>. Otherwise, the default port number is <strong id="mrs_01_24109__b3358958154315">389</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.25262526252625%" headers="mcps1.3.4.2.2.2.1.2.4.1.3 "><p id="mrs_01_24109__p125510247470">636</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_24109__row6855133113473"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p085543164711">ldap_servers.ldap_server_name.auth_dn_prefix</p>
|
|
</td>
|
|
<td class="cellrowborder" rowspan="2" valign="top" width="40.41404140414041%" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p11362722550">Prefix and suffix used to construct the DN to bind to.</p>
|
|
<p id="mrs_01_24109__p109212705617">The generated DN will be constructed as a string in the following format: <strong id="mrs_01_24109__b0731132410442">auth_dn_prefix</strong> + <strong id="mrs_01_24109__b1473832414413">escape(user_name)</strong> + <strong id="mrs_01_24109__b5739724204410">auth_dn_suffix</strong>.</p>
|
|
<p id="mrs_01_24109__p49217175611">Use a comma (,) as the first non-space character of <strong id="mrs_01_24109__b54867514449">auth_dn_suffix</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.25262526252625%" headers="mcps1.3.4.2.2.2.1.2.4.1.3 "><p id="mrs_01_24109__p19663145715019">uid=</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_24109__row8439143984715"><td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p1843911393475">ldap_servers.ldap_server_name.auth_dn_suffix</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p11439123911476">,ou=Group,dc=node1,dc=com</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_24109__row15626125017471"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p1462685013474">ldap_servers.ldap_server_name.enable_tls</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="40.41404140414041%" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p257815725611">A tag to trigger the use of the secure connection to the OpenLDAP server.</p>
|
|
<ul id="mrs_01_24109__ul82024211573"><li id="mrs_01_24109__li185413510572">Set it to <strong id="mrs_01_24109__b512118127476">no</strong> for the plaintext (ldap://) protocol (not recommended).</li><li id="mrs_01_24109__li182028216577">Set it to <strong id="mrs_01_24109__b102056104810">yes</strong> for the LDAP over SSL/TLS (ldaps://) protocol.</li></ul>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.25262526252625%" headers="mcps1.3.4.2.2.2.1.2.4.1.3 "><p id="mrs_01_24109__p127233385614">yes</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="mrs_01_24109__row14274135512478"><td class="cellrowborder" valign="top" width="33.33333333333333%" headers="mcps1.3.4.2.2.2.1.2.4.1.1 "><p id="mrs_01_24109__p17274125511473">ldap_servers.ldap_server_name.tls_require_cert</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="40.41404140414041%" headers="mcps1.3.4.2.2.2.1.2.4.1.2 "><p id="mrs_01_24109__p02829483577">SSL/TLS peer certificate verification behavior.</p>
|
|
<p id="mrs_01_24109__p1728294805714">The value can be <strong id="mrs_01_24109__b13758243194920">never</strong>, <strong id="mrs_01_24109__b5725154612498">allow</strong>, <strong id="mrs_01_24109__b64941348124918">try</strong>, or <strong id="mrs_01_24109__b155831650154912">require</strong>.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="26.25262526252625%" headers="mcps1.3.4.2.2.2.1.2.4.1.3 "><p id="mrs_01_24109__p927415514717">allow</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<div class="note" id="mrs_01_24109__note8253141915419"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_24109__p925311910411">For details about other parameters, see <a href="#mrs_01_24109__section16259164716419"><ldap_servers> Parameters</a>.</p>
|
|
</div></div>
|
|
</p></li><li id="mrs_01_24109__li1783202443612"><span>After the configuration is complete, click <strong id="mrs_01_24109__b195581517175014">Save</strong>. In the displayed dialog box, click <strong id="mrs_01_24109__b1262712216517">OK</strong>. After the configuration is saved, click <strong id="mrs_01_24109__b14484520851">Finish</strong>.</span></li><li id="mrs_01_24109__li1738724613233"><span>On Manager, click <strong id="mrs_01_24109__b1115195485112">Instance</strong>, select a ClickHouseServer instance, and choose <strong id="mrs_01_24109__b18173182114522">More</strong> > <strong id="mrs_01_24109__b342322485210">Restart Instance</strong>. In the displayed dialog box, enter the password and click <strong id="mrs_01_24109__b1531123010520">OK</strong>. In the displayed <strong id="mrs_01_24109__b19506135111714">Restart instance</strong> dialog box, click <strong id="mrs_01_24109__b13218575164">OK</strong>. Confirm that the instance is restarted successfully as prompted and click <strong id="mrs_01_24109__b97781559171617">Finish</strong>.</span></li><li id="mrs_01_24109__li41883019273"><span>Log in to the ClickHouseServer instance node and go to the <strong id="mrs_01_24109__b913122816012">${BIGDATA_HOME}/FusionInsight_ClickHouse_</strong><em id="mrs_01_24109__i19455328488">Version number</em><strong id="mrs_01_24109__b574113016016">/</strong><em id="mrs_01_24109__i1542619449389">x_x</em><strong id="mrs_01_24109__b78919326013">_ClickHouseServer/etc</strong> directory.</span><p><p id="mrs_01_24109__p718815062711"><strong id="mrs_01_24109__b918880162715">cd </strong><strong id="mrs_01_24109__b153181915131816">${BIGDATA_HOME}/FusionInsight_ClickHouse</strong><strong id="mrs_01_24109__b8336131419229">_*</strong><strong id="mrs_01_24109__b3245115019376">/</strong><em id="mrs_01_24109__i1363692893914">x_x</em>_<strong id="mrs_01_24109__b18111155113816">ClickHouseServer</strong><strong id="mrs_01_24109__b1622972401819">/etc</strong></p>
|
|
</p></li><li id="mrs_01_24109__li111911544142720"><a name="mrs_01_24109__li111911544142720"></a><a name="li111911544142720"></a><span>Run the following command to view the <strong id="mrs_01_24109__b19420537155315">config.xml</strong> configuration file and check whether the OpenLDAP parameters are configured successfully:</span><p><p id="mrs_01_24109__p2583185416276"><strong id="mrs_01_24109__b1258315462715">cat config.xml</strong></p>
|
|
<p id="mrs_01_24109__p187371056114316"><span><img id="mrs_01_24109__image1373755684318" src="en-us_image_0000001296090112.png"></span></p>
|
|
</p></li><li id="mrs_01_24109__li14621174714330"><span>Log in to the node where the ClickHouseServer instance is located as user <strong id="mrs_01_24109__b123143564811233">root</strong>.</span></li><li id="mrs_01_24109__li10408141903516"><a name="mrs_01_24109__li10408141903516"></a><a name="li10408141903516"></a><span>Run the following command to obtain the path of the <strong id="mrs_01_24109__b152807399311233">clickhouse.keytab</strong> file:</span><p><p id="mrs_01_24109__p2088093683711"><strong id="mrs_01_24109__b58285331372">ls ${BIGDATA_HOME}/FusionInsight_ClickHouse_*/install/FusionInsight-ClickHouse-*/clickhouse/keytab/clickhouse.keytab</strong></p>
|
|
</p></li><li id="mrs_01_24109__li10269200102512"><span>Log in to the node where the client is installed as the client installation user.</span></li><li id="mrs_01_24109__li4269903251"><span>Run the following command to go to the ClickHouse client installation directory:</span><p><p id="mrs_01_24109__p44422034711"><strong id="mrs_01_24109__b544219064710">cd /opt/client</strong></p>
|
|
</p></li><li id="mrs_01_24109__li172699012517"><span>Run the following command to configure environment variables:</span><p><p id="mrs_01_24109__p6443605473"><strong id="mrs_01_24109__b74438010475">source bigdata_env</strong></p>
|
|
</p></li><li id="mrs_01_24109__li1262061185015"><span>Run the following command to connect to the ClickHouseServer instance:</span><p><ul id="mrs_01_24109__ul16380336184814"><li id="mrs_01_24109__li838003619480">If Kerberos authentication is enabled for the current cluster, use <strong id="mrs_01_24109__b204861254195419">clickhouse.keytab</strong> to connect to the ClickHouseServer instance.<p id="mrs_01_24109__p16331192711489"><strong id="mrs_01_24109__b97805151211233">clickhouse client --host </strong><em id="mrs_01_24109__i157048720111233">IP address of the node where the ClickHouseServer instance is located </em><strong id="mrs_01_24109__b172767895111233">--user clickhouse/hadoop.</strong><em id="mrs_01_24109__i170637085911233"><System domain name></em><strong id="mrs_01_24109__b984986011233"> --password </strong> <em id="mrs_01_24109__i529024411233">clickhouse.keytab path obtained in <a href="#mrs_01_24109__li10408141903516">8</a></em><strong id="mrs_01_24109__b201441901411233"> --port </strong><em id="mrs_01_24109__i124709201211233">ClickHouse port number</em></p>
|
|
<div class="note" id="mrs_01_24109__note17716205472919"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="mrs_01_24109__p11491758192916">The default system domain name is <strong id="mrs_01_24109__b105481667511233">hadoop.com</strong>. Log in to FusionInsight Manager and choose <strong id="mrs_01_24109__b942641525612">System</strong> > <strong id="mrs_01_24109__b14328157569">Permission</strong> > <strong id="mrs_01_24109__b124332155566">Domain and Mutual Trust</strong>. The value of <strong id="mrs_01_24109__b1243321513569">Local Domain</strong> is the system domain name. Change the letters to lowercase letters when running a command.</p>
|
|
</div></div>
|
|
</li><li id="mrs_01_24109__li12631043154811">If Kerberos authentication is disabled for the current cluster, connect to the ClickHouseServer instance as the <strong id="mrs_01_24109__b1175015220576">clickhouse</strong> administrator.<p id="mrs_01_24109__p1120111012513"><strong id="mrs_01_24109__b18286480311233">clickhouse client --host </strong><em id="mrs_01_24109__i130275679111233">IP address of the node where the ClickHouseServer instance is located</em><strong id="mrs_01_24109__b96556998611233"> --user clickhouse</strong> <strong id="mrs_01_24109__b122359462111233">--port </strong><em id="mrs_01_24109__i189460571211233">ClickHouse port number</em></p>
|
|
</li></ul>
|
|
</p></li><li id="mrs_01_24109__li149786613266"><span>Create a common user of OpenLDAP.</span><p><p id="mrs_01_24109__p166711652102810">Run the following statement to create user <strong id="mrs_01_24109__b201711725191312">testUser</strong> in cluster <strong id="mrs_01_24109__b7985129201312">default_cluster</strong> and set <strong id="mrs_01_24109__b3976521111417">ldap_server</strong> to the OpenLDAP server name in the <strong id="mrs_01_24109__b177611440191412"><ldap_servers></strong> tag in <a href="#mrs_01_24109__li111911544142720">6</a>. In this example, the name is <strong id="mrs_01_24109__b13824649171418">ldap_server_name</strong>.</p>
|
|
<p id="mrs_01_24109__p629323016284"><strong id="mrs_01_24109__b4221192142911">CREATE USER </strong><em id="mrs_01_24109__i94790217296">testUser </em><strong id="mrs_01_24109__b153168033016"> ON CLUSTER </strong><em id="mrs_01_24109__i16317140123018">default_cluster</em><strong id="mrs_01_24109__b931611013302"> </strong><strong id="mrs_01_24109__b12899144053513">IDENTIFIED WITH ldap_server BY '</strong>ldap_server_name<strong id="mrs_01_24109__b889914013353">';</strong></p>
|
|
<p id="mrs_01_24109__p143011255123616"><strong id="mrs_01_24109__b16950181818158">testUser</strong> indicates an existing username in OpenLDAP. Change it based on the site requirements.</p>
|
|
</p></li><li id="mrs_01_24109__li167051207431"><span>Log out of the client, and then log in to the client as the new user to check whether the configuration is successful.</span><p><p id="mrs_01_24109__p7363174495313"><strong id="mrs_01_24109__b2937948175318">exit;</strong></p>
|
|
<p id="mrs_01_24109__p25618426538"><strong id="mrs_01_24109__b1856112422536">clickhouse client --host </strong><em id="mrs_01_24109__i156116428536">IP address of the ClickHouseServer instance</em> <strong id="mrs_01_24109__b4561442165313"> --user </strong><em id="mrs_01_24109__i1656114420535">testUser</em><em id="mrs_01_24109__i18561742125311"> </em><strong id="mrs_01_24109__b135610424530">--password</strong> <strong id="mrs_01_24109__b83331413125412"> --port </strong><em id="mrs_01_24109__i203331138544">ClickHouse port number</em></p>
|
|
<p id="mrs_01_24109__p14522155645914"><em id="mrs_01_24109__i147511367385">Enter the password of testUser.</em></p>
|
|
</p></li></ol>
|
|
</div>
|
|
<div class="section" id="mrs_01_24109__section16259164716419"><a name="mrs_01_24109__section16259164716419"></a><a name="section16259164716419"></a><h4 class="sectiontitle"><ldap_servers> Parameters</h4><ul id="mrs_01_24109__ul5343818174217"><li id="mrs_01_24109__li11343181864211"><strong id="mrs_01_24109__b1337086115316">host</strong><p id="mrs_01_24109__p837811123426">OpenLDAP server host name or IP address. This parameter is mandatory and cannot be empty.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul14477132018428"><li id="mrs_01_24109__li10477152034219"><strong id="mrs_01_24109__b155631010532">port</strong><p id="mrs_01_24109__p2037815129422">Port number of the OpenLDAP server. If <strong id="mrs_01_24109__b178441126101910">enable_tls</strong> is set to <strong id="mrs_01_24109__b17718831191918">true</strong>, the default value is <strong id="mrs_01_24109__b88061347196">636</strong>. Otherwise, the value is <strong id="mrs_01_24109__b8627436151918">389</strong>.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul17646152274211"><li id="mrs_01_24109__li15646222184211"><strong id="mrs_01_24109__b5625101355313">auth_dn_prefix, auth_dn_suffix</strong><p id="mrs_01_24109__p1737813121420">Prefix and suffix used to construct the DN to bind to.</p>
|
|
<p id="mrs_01_24109__p337881234214">The generated DN will be constructed as a string in the following format: <strong id="mrs_01_24109__b423419032414">auth_dn_prefix</strong> + <strong id="mrs_01_24109__b104516332418">escape(user_name)</strong> + <strong id="mrs_01_24109__b2675196122419">auth_dn_suffix</strong>.</p>
|
|
<p id="mrs_01_24109__p20378912164212">Note that you should use a comma (,) as the first non-space character of <strong id="mrs_01_24109__b23241255132417">auth_dn_suffix</strong>.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul172241625174218"><li id="mrs_01_24109__li4224102519425"><strong id="mrs_01_24109__b1165151916530">enable_tls</strong><p id="mrs_01_24109__p193781512174216">A tag to trigger the use of the secure connection to the OpenLDAP server.</p>
|
|
<p id="mrs_01_24109__p83781312124210">Set it to <strong id="mrs_01_24109__b6574195182613">no</strong> for the plaintext (ldap://) protocol (not recommended).</p>
|
|
<p id="mrs_01_24109__p4378131214428">Set it to <strong id="mrs_01_24109__b11837102933016">yes</strong> for LDAP over SSL/TLS (ldaps://) protocol (recommended and default).</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul177752884213"><li id="mrs_01_24109__li47771128164219"><strong id="mrs_01_24109__b11753192275318">tls_minimum_protocol_version</strong><p id="mrs_01_24109__p15378212154210">Minimum protocol version of SSL/TLS.</p>
|
|
<p id="mrs_01_24109__p173781312114216">The value can be <strong id="mrs_01_24109__b458186133315">ssl2</strong>, <strong id="mrs_01_24109__b181349823313">ssl3</strong>, <strong id="mrs_01_24109__b311131193313">tls1.0</strong>, <strong id="mrs_01_24109__b6961181419333">tls1.1</strong>, or <strong id="mrs_01_24109__b826251714332">tls1.2</strong> (default).</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul51441931154219"><li id="mrs_01_24109__li17144183164212"><strong id="mrs_01_24109__b27291626105313">tls_require_cert</strong><p id="mrs_01_24109__p103781612104213">SSL/TLS peer certificate verification behavior.</p>
|
|
<p id="mrs_01_24109__p73781712194210">The value can be <strong id="mrs_01_24109__b03771524133417">never</strong>, <strong id="mrs_01_24109__b63051627153413">allow</strong>, <strong id="mrs_01_24109__b54572917342">try</strong>, or <strong id="mrs_01_24109__b15951123117340">require</strong> (default).</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul6224133384211"><li id="mrs_01_24109__li922413364210"><strong id="mrs_01_24109__b4123135313">tls_cert_file</strong><p id="mrs_01_24109__p1378212174213">Certificate file.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul1673815343423"><li id="mrs_01_24109__li873810344423"><strong id="mrs_01_24109__b1072053418531">tls_key_file</strong><p id="mrs_01_24109__p13781412124213">Certificate key file.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul1843843644212"><li id="mrs_01_24109__li11438123614214"><strong id="mrs_01_24109__b1739344314536">tls_ca_cert_file</strong><p id="mrs_01_24109__p937818129427">CA certificate file.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul10995173784213"><li id="mrs_01_24109__li129951437174218"><strong id="mrs_01_24109__b8272164715312">tls_ca_cert_dir</strong><p id="mrs_01_24109__p337881217427">Directory where the CA certificate is stored.</p>
|
|
</li></ul>
|
|
<ul id="mrs_01_24109__ul5830133910426"><li id="mrs_01_24109__li3830439104214"><strong id="mrs_01_24109__b1768965045313">tls_cipher_suite</strong><p id="mrs_01_24109__p18378151210422">Allowed encryption suite.</p>
|
|
</li></ul>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="mrs_01_24251.html">User Management and Authentication</a></div>
|
|
</div>
|
|
</div>
|
|
|