Hi,
In case you follow instructions from ChainOnUpdate page,
http://directory.fedoraproject.org/wiki/Howto:ChainOnUpdate
note that in "Step 2 (Hub Only)" OID for
nsTransmittedControl: 2.16.840.1.113730.3.4.12
representing a proxied authorization control is an old OID of the control which
newer version (version 2) is
2.16.840.1.113730.3.4.18
Hence, at least in my 389 DS, version 1.2.10.7, which rootDSE has the newer OID
of the control among its supportedcontrol values it was required that
dn: cn=config,cn=chaining database,cn=plugins,cn=config
has
nsTransmittedControl: 2.16.840.1.113730.3.4.18
Otherwise, I kept receiving "Critical extension is unavailable (12)" error
Hope this may be helpful to someone.
Thanks,
Jovan
--
389 users mailing list
[email protected]
https://admin.fedoraproject.org/mailman/listinfo/389-users
