Hello Michael, it seems that the problem was me again. I created the objectClasses, but I didn't realize that the attributes "userCertificate" and "cACertificate" must be possible in the classes. After putting "cACertificate" in the class "person" (for test purposes), it works fine. "userCertificate" is in class "user" for standard.
Sorry for stealing your time again, Gregor [EMAIL PROTECTED] schrieb am 11.06.04 09:13:16: > > Gregor Bethlen wrote: > > Hello List, > > > > I'm trying to use Microsoft's Active Directory as an LDAP server. Server is > > Windows Server 2003 Standard Edition. > > > > It used to work fine with OpenLDAP, but since out company has the AD, I have to > > try to get it work with it. > > > > Has anyone experience with it? I need especially help in the LDAP-Schema, since > > it's not so easy as in OpenLDAP (no contrib/ad2003.schema ;-)) > > > > I tried to put to contrib/openca.schema-entries into the AD, works fine, but > > exporting CA Certificate to LDAP failes with: > > > > "error 65: 0000207D: UpdErr: DSID-03150EF5, problem 6002 (OBJ_CLASS_VIOLATION), > > data 0" > > > > So it seems that there is an objectClass missing (or has wrong attributes), but I > > don't know which one it is. The "pkiCA", "pkiUser", > > "opencaUniquelyIdentifiedUser", "opencaEmailAddress", "opencaSCEPDevice" are in > > the AD-schema, but it doesn't work. > > An object class violation means that we set an attribute which is not > supported by the actually configured and used object classes. Can you > set some more debug options for the AD? "data 0(zero)" does not help > much to locate the problem. > > Can you dump the supported object classes? It looks like there are > differences in the definitions between OpenLDAP and AD because it works > on an OpenLDAP with activated schemachecking. > > Michael > -- > ------------------------------------------------------------------- > Michael Bell Email: [EMAIL PROTECTED] > ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 > (Computing Centre) Fax: +49 (0)30-2093 2704 > Humboldt-University of Berlin > Unter den Linden 6 > 10099 Berlin Email (private): [EMAIL PROTECTED] > Germany http://www.openca.org > > > > ------------------------------------------------------- > This SF.Net email is sponsored by the new InstallShield X. > From Windows to Linux, servers to mobile, InstallShield X is the > one installation-authoring solution that does it all. Learn more and > evaluate today! http://www.installshield.com/Dev2Dev/0504 > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users __________________________________________________________________ Zeigen Sie Emotionen mit der WEB.DE Bild-SMS! Das Bild ist gratis, Sie bezahlen nur den Versand. http://freemail.web.de/?mc=021196 ------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X. >From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
