Ives Steglich wrote:
Hi there,

i have the case that my ldap would look like this:

dn: ou=emt,ou=iis,o=fhg

as its base... so - how do i setup this in the different config files?

example: config.xml

[...]
  <!-- general options -->
  <!-- =============== -->
  <option>
     <name>ca_organization</name>
     <value>AEMT</value>
  </option>
  <option>
     <name>ca_locality</name>
     <value>Ilmenau</value>
  </option>
     <option>
     <name>ca_country</name>
  <value></value>
  </option>
[...]

do i just leave country open and organisation
would than be fhg? even if my real one would
be an substructure (in this case)

or do i just have to add something like:
suffix   "ou=emt,ou=iis,o=fhg"

at the slapd.conf (if its openldap) and this
will look to make the correct creation of entries?

how do i sensfull setup my xxx-openssl.conf files than?
any hints for me ;o)


so - maybe this is a special case, but i guess not sooo uncommon, so its good idea to have in the faq... at least i would like to have it right know - or i just look at the wrong place(s)

There is a description for the dc style in the new OpenCA guide in the CVS. Please see administration guide --> configuration --> subject.


Short version of the story:

1. you can set the country or let it empty
2. for the organization I would recommend to use Frauenhofer Gesellschaft (you have to edit the configuration files and so the html files include the full name not only the abbreviation)
3. then you have to edit the files like mentioned in the guide
4. Please remember to change the policy in the OpenSSL's conf files (etc/openssl/openssl.cnf and etc/openssl/openssl/*.conf).


I hope this is enough if yes, then we can add to the FAQ.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to