Starting a Directory Server Instance with SSL Enabled

Note: Beginning with Oracle Internet Directory Release 9.0.2, only wallets in encrypted (cwallet.sso) format are supported. This means that, before you can start an SSL instance, you must use Oracle Wallet Manager enabled to AutoLogin to open the wallet. In releases of Oracle Internet Directory prior to Release 9.0.2, a password can be provided to open the wallet. On the Windows operating system, before starting a directory server instance with SSL enabled, you must change the Logon Account of the Oracle Directory Service from Local System Account to the user who owns the wallet. This user should be member of the Administrator Group. To change the services: On Windows 2000: Choose in succession Start, Settings, Control Panel, Administrative Tools, Services. On Windows NT: Choose in succession Start, Settings, Control Panel, Services. Right-click Oracle Directory Service, then choose Properties. Select the Logon tab. Clear the Local System Account radio button, and select This Account. Enter the account you logged in as when you created the wallet. Stop and restart the service.

Use the OID Control utility to start the directory server with SSL enabled.

In this example, SSL is configured in Configset 1. It is assumed that no directory server instance with instance ID 2 is running. Enter this command:

oidctl connect=<et_service_name server=oidldapd instance=2 configset=1 start