Hello List,
I'm trying to use Microsoft's Active Directory as an LDAP server. Server is Windows Server 2003 Standard Edition.
It used to work fine with OpenLDAP, but since out company has the AD, I have to try to get it work with it.
Has anyone experience with it? I need especially help in the LDAP-Schema, since it's not so easy as in OpenLDAP (no contrib/ad2003.schema ;-))
I tried to put to contrib/openca.schema-entries into the AD, works fine, but exporting CA Certificate to LDAP failes with:
"error 65: 0000207D: UpdErr: DSID-03150EF5, problem 6002 (OBJ_CLASS_VIOLATION), data 0"
So it seems that there is an objectClass missing (or has wrong attributes), but I don't know which one it is. The "pkiCA", "pkiUser", "opencaUniquelyIdentifiedUser", "opencaEmailAddress", "opencaSCEPDevice" are in the AD-schema, but it doesn't work.
An object class violation means that we set an attribute which is not supported by the actually configured and used object classes. Can you set some more debug options for the AD? "data 0(zero)" does not help much to locate the problem.
Can you dump the supported object classes? It looks like there are differences in the definitions between OpenLDAP and AD because it works on an OpenLDAP with activated schemachecking.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
