I sent this message once again, because I sent it to Micheal direct instead to 
the list.
> basedn in configurationfiles. Actually we are not ready to support<BR>
 > multiple suffixes. I put it on the TODO-list in the CHANGES-file.<BR>
> <BR>
> Michael<BR>
> --<BR>

 Thank You. Now it works:

Config ldap Server
 ----------------------------------
 One problem, which I have with slapd on SuSE8.1 is, that
 slapd won't stop after
     /etc/init.d/ldap stop!
 I do:
    ps aux | grep slap
 and kill the processes with kill $number!
Another thing is, that my slapd only want a rootdn (binddn) which is
 beneath the suffix (basedn).


 part vom slapd.conf:
 %<------------------
 allow bind_v2
 database        bdb
 suffix          "o=results-hannover,C=de"
 rootdn          "cn=Manager,o=results-hannover,C=de"
 rootpw          peterpeter
 ------------>%

 So I need the configure-options:

  --with-ldap-host=ra.intern.results-hannover.de \
  --with-ldap-root="cn=Manager,o=results-hannover,c=de" \
  --with-ldap-root-pwd=peterpeter \

 My CA-Cert has the entrys:

 Distinguished
     Name:
                  [EMAIL PROTECTED]
                  CN=ca
                 OU=intern
                  O=results-hannover
                  C=de

 After I have do the inital import
       RASserver init/Configuration import
 slapcat found in ldap:
 %<--------------
 dn: o=results-hannover,c=de
 o: results-hannover
 authorityRevocationList;binary:
 certificateRevocationList;binary:
 cACertificate;binary:
 objectClass: top
 objectClass: organization
 objectClass: certificationAuthority
 structuralObjectClass: organization
 .... and something more.
 ----->%

 To debug my problem I use the -d option from slapd
    /usr/lib/openldap/slapd -d 256
 and to set lines with
    DEBUG = 0  to DEBUG = 1  (:1,$ s/DEBUG = 1/DEBUG = 0/g)
 in
     ./OpenCA/lib/functions/ldap-utils.lib

-- 
Dr. Harald Wallus
Results GmbH 
Am Listholze 78, D-30177 Hannover 
Tel: +49(0)511 90 95 1-23  Fax: +49(0)511 90 95 = 1-90 
Email: [EMAIL PROTECTED] 
Internet: http://www.results-hannover.de 


-------------------------------------------------------
This sf.net emial is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0002en
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to