Robert Hannemann schrieb:

> Michael Bell schrieb:
>
> > Udo Woehler schrieb:
> > >
> > > after this great fix for my CRL problem I have another problem.
> > > I can't import the user certificates into ldap.
> > > The reason is that OpenCA want's to add objects for
> > > the serialnumbers under the user object.
> > > Many LDAP implementations (like Novell eDirectory, which I use)
> > > does not allow subobjects under a User Objects, because
> > > the User object is defined as leaf object.
> > > So there is no way to put serialnumber objects below the user object.
> > > But it is possible to add more than one certificate to a single user
> > > object.
> >
> > What is a leaf in LDAP? I never read about such a limitation. Does
> > Novell use different definitions for objects? Leaves and nodes like in
> > B*-Trees?
> >
> > > Ok, I don't really need this certificates in LDAP now, but I think
> > > that this should be added to the "requested feature enhancement" list
> > > ;-)
> >
> > You can add the certificate to the LDAP via the button on the RA where
> > you can store the certificate under a special DN (simply remove the
> > serialNumber).
> >
>
> Morning,
>
> you can change your Name Forms to allow adding of such objects under any

and your DIT Structure Rules. Another way is to modify your OpenCA conf files:

SET_CERTIFICATE_SERIAL_IN_DN     "N"

Robert

>
> object you want and btw what is a user object ? You mean objectclass person
> ? Normally a leaf entry is one with no subentries, so this should not be
> the reason for your problem.

>
> Robert
>
> >
> > Michael
> > --
> > -------------------------------------------------------------------
> > Michael Bell                   Email (private): [EMAIL PROTECTED]
> > Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
> > Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
> > Unter den Linden 6             Fax:  +49 (0)30-2093 2959
> > 10099 Berlin
> > Germany                                       http://www.openca.org
> >
> > _______________________________________________
> > Openca-Users mailing list
> > [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/openca-users
>
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users


_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to