[OpenCA-Devel] LDAP export with search - different dn for cert and ldap

2005-06-15 Thread Oliver Welter
Hi Folks, I have a nice feature-request here :) I have a certificate that contains a unique ID in the DN (number of company register) I have a LDAP Server that has a completely differnt DN scheme, but the mentioned ID is a unique attribute in the LDAP tree, too. So this means I can search f

Re: [OpenCA-Devel] LDAP export with search - different dn for cert and ldap

2005-06-15 Thread Peter Gietz
Oliver Welter wrote: Hi Folks, I have a nice feature-request here :) I have a certificate that contains a unique ID in the DN (number of company register) I have a LDAP Server that has a completely differnt DN scheme, but the mentioned ID is a unique attribute in the LDAP tree, too. So thi

Re: [OpenCA-Devel] addCRR command question

2005-06-15 Thread Johnny Gonzalez
Hello Bahaaldin   Thanks for you answer, but  I have a problem   If I follow your suggestions then no PIN will be in the header of certificate table, so which method should I use to verify the CRIN entered by the users? That's my main problem, how to verify the CRIN. I tryed using the dgst command

RE: [OpenCA-Devel] addCRR command question

2005-06-15 Thread Alamood, Bahaaldin
Johnny,   Can you get me a database dump of the certificate record that you are trying to revoke. I want one that you did after you did my suggestion below. I would like to look at the header of the certificate. Thanks   Best regards, Bahaa Al-amood     If I follow your suggesti

RE: [OpenCA-Devel] addCRR command question

2005-06-15 Thread Johnny Gonzalez
Hello Bahaaldin, I'm sending you the dump you asked me with a certificate issued after the changes you suggested me. Thanks a lot for your help. --- "Alamood, Bahaaldin" <[EMAIL PROTECTED]> escribió: > Johnny, > > > > Can you get me a database dump of the certificate > record that you are

Re: [OpenCA-Devel] LDAP export with search - different dn for cert and ldap

2005-06-15 Thread Oliver Welter
Hi Peter, Can I do this transformation via the schema-descriptions in ldap.xml or have I to rewrite the ldap-export Module = AFAICS there are no DN-Transformation rules implemented, thus subjectDN equals the DN of the LDAP entry. Michael please correct me, if I am wrong here. What you need

Re: [OpenCA-Devel] LDAP export with search - different dn for cert and ldap

2005-06-15 Thread Dr. Rodney McDuff
Perhaps you can use the perl backend of openldap to proxy the request, rewrite the query and DNs as necessary, sent the transformed request to the real ldap server, get the response back, rewrite it and then send it back to opena as it expects. This can solve the general problems of DNs is cert