Hello, Having problem with importing certificates to LDAP. Server certificates are issued with DNS fqdn in Subject Alternative Name. I'm using Openldap 2.0.x. It seems, that openldap does not get no value for attribute "mail". Excerpt from openldap debug follows:
-->Openldap debug start ..... send_ldap_result: 21::mail: value #0 invalid per syntax send_ldap_response: msgid=5 tag=105 err=21 ber_flush: 47 bytes to sd 7 0000: 30 2d 02 01 05 69 28 0a 01 15 04 00 04 21 6d 61 0-...i(......!ma 0010: 69 6c 3a 20 76 61 6c 75 65 20 23 30 20 69 6e 76 il: value #0 inv 0020: 61 6c 69 64 20 70 65 72 20 73 79 6e 74 61 78 alid per syntax ldap_write: want=47, written=47 0000: 30 2d 02 01 05 69 28 0a 01 15 04 00 04 21 6d 61 0-...i(......!ma 0010: 69 6c 3a 20 76 61 6c 75 65 20 23 30 20 69 6e 76 il: value #0 inv 0020: 61 6c 69 64 20 70 65 72 20 73 79 6e 74 61 78 alid per syntax conn=12 op=4 RESULT tag=105 err=21 text=mail: value #0 invalid per syntax ..... <---end My configuration: openca 0.9.1.3 With options: serialnumber in DN set to NO Emailaddress in DN set to NO I know, that with last option set to YES everything works fine. Anyone faced & solved this issue? kind regards, ondrej ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
