On Tuesday 15 August 2006 18:41, Zaki Akhmad wrote: > Dear, > > I have finished installing OpenCA. But I'm still having errors when I > export and import certificates to LDAP. I have read this mailing-list > archive. But I haven't found the solution. > > Here's the error message when I try to import certificate from ca-node > to ra-node. > > Importing all certificates from a higher level of the hierarchy ... > (Please wait until operation completes) > -------------------------------------------------------------- > ... > .... > LDAP-support is activated > Automatic LDAP-update is activated > Importing valid CERTIFICATE ... > > Cleaning up the collected import logs ... > > WARNING: Cannot update object but object is present in database > > FILE: /usr/local/openra/openca/var/tmp/tmp_4995/CERTIFICATE/VALID/7.pem > > And here's the error message, when I log in to LDAP > LDAP update > > CertificatesUpdating certificates on the LDAP server > > (Please wait until operation completes) > Exporting valid certificates to LDAP ... > > Certificate 1 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 2 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 3 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 4 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 5 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 6 FAILED (error 49: LDAP-bind failed: Invalid credentials) > > Certificate 7 FAILED (error 49: LDAP-bind failed: Invalid credentials)
The account details (dn, password, or both) you have configured for OpenCA to use to update LDAP are not correct. You should check them with something like ldapwhoami, eg: $ ldapwhoami -x -D cn=openca,dc=mydomain,dc=com -w opencaldappass -h ldap.mydomain.com or similar Regards, Buchan -- Buchan Milne ISP Systems Specialist B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)
pgpFFdoaLdVYy.pgp
Description: PGP signature
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
