Perhaps I should have clarified - An example of how to do this would be the following replacement:
DN_TYPE_SPKAC_BASE DN_TYPE_SPKAC_ELEMENTS DN_TYPE_SPKAC_NAME "Basic User Request" I haven't actually tested leaving them completely blank, however, typically if you reduce them to a single entry, you can just modify that so that C=AU. Edit the appropriate DN_TYPE_*_BASE entries that you want to relax the policy on. The ELEMENTS entries are just for what is offered on the user entry form when creating a new request on the web front end. cheers, (bedtime for me) On 01/09/2006, at 10:48 PM, James Lever wrote: > Edit the profile under openca/etc/servers/ra.conf and ca.conf > > You want to modify the entries that look like this > > DN_TYPE_SPKAC_BASE "O" "C" > DN_TYPE_SPKAC_ELEMENTS "emailAddress" "CN" "OU" > DN_TYPE_SPKAC_NAME "Basic User Request" > DN_TYPE_SPKAC_BASE_1 "@ca_organization@" > DN_TYPE_SPKAC_BASE_2 "@ca_country@" > > As these are mandatory and fixed, whereas the other entries below are > variable. You will need to do this for each CSR type you want to be > submitting outside the default required profiles. James Lever Senior Systems Analyst -- Strategic Technologies Group (STG) Information Technology Services (ITS) The University of Queensland Brisbane Queensland 4072 Ph: +61 7 336 57342 [EMAIL PROTECTED] ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
