To Force Directory Server to Validate Plug-In Signatures

1. Set the ds-verify-plugin-signature in cn=config to on.

2. Set the ds-require-valid-plugin-signatures in cn=config to on.

3. Restart Directory Server.

   The server does not start if any plug-in is not signed or a signature is invalid.