I "think" I did.

here is what I have in my slapd.conf  ( I have tried two different version.  Also I delete everything under var/openldap-data when I switch different configuration ).

Version 1:
.....
database        ldbm
suffix          "o=MyDomain,c=US"
suffix         "OU=IS,o=MyDomain,c=US"
rootdn          "uid=root,ou=People,o=MyDomain,c=US"
....


Version 2:
...
database       bdb
suffix         "o=MyDomain,c=US"
rootdn         "uid=root,ou=People,o=MyDomain,c=US"
...


none of these work.


Barrow



Oliver Welter <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED]

08/01/2004 11:44 PM

Please respond to
[EMAIL PROTECTED]

To
[EMAIL PROTECTED]
cc
Subject
Re: [Openca-Users] OpenCA and OpenLDAP





Hi Barrwo

> [EMAIL PROTECTED],CN=MyDomainCA,OU=IS,O=MyDomain,C=US
...
> (DEBUG) OpenCA::LDAP->get_suffix: successfully finished
> (DEBUG) OpenCA::LDAP->add_object: dn conflicts with basedn(s)
>
> Cannot write CA-Certificate d94519578fe79a69c630d3848edd4fbd to LDAP.
> (error -4: Distinguished name conflicts with basedn(s).)

Just read ! You set a base dn in your ldap servers configuration other
than your certificate DN, you LDAP MUST have a base dn that is a subset
of the certs DN e.g. OU=IS,O=MyDomain,C=US

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to