I have got the CA set up but the RA initialisation fails on
the import of the CA certificate to the LDAP:
Importing the RBAC-configuration ... Ok.
LDAP-support is activated
Automatic LDAP-update is activated
Importing valid CA_CERTIFICATE ...
1f64621b6e246339cfa66258247afada.pem updated
Importing CA-Certificates into ldap ...
Cannot write CA-Certificate 1f64621b6e246339cfa66258247afada to LDAP
Re-Building CA Chain ... Ok.
Clean up ...Ok.
>From the LDAP logs it looks like the Bind goes OK and the search returns
not yet present, but after that...?
Nov 25 10:51:24 dolly slapd[4533]: daemon: conn=2 fd=9 connection from
IP=127.0.0.1:44412 (IP=0.0.0.0:34049) accepted.
Nov 25 10:51:24 dolly slapd[4558]: conn=2 op=0 BIND dn="CN=MANAGER,O=OPENCA,C=NL"
method=128
Nov 25 10:51:24 dolly slapd[4558]: conn=2 op=0 RESULT tag=97 err=0 text=
Nov 25 10:51:24 dolly slapd[4533]: conn=-1 fd=9 closed
Nov 25 10:51:24 dolly slapd[4533]: daemon: conn=3 fd=9 connection from
IP=127.0.0.1:44413 (IP=0.0.0.0:34049) accepted.
Nov 25 10:51:24 dolly slapd[4558]: conn=3 op=0 BIND dn="CN=MANAGER,O=OPENCA,C=NL"
method=128
Nov 25 10:51:24 dolly slapd[4558]: conn=3 op=0 RESULT tag=97 err=0 text=
Nov 25 10:51:24 dolly slapd[4558]: conn=3 op=1 SRCH
base="[EMAIL PROTECTED],cn=Ewald
+Beekman,o=Academic Medical Center,c=NL" scope=0 filter="(cACertificate;binary=*)"
Nov 25 10:51:24 dolly slapd[4558]: conn=3 op=1 RESULT tag=101 err=32 text=
Nov 25 10:51:24 dolly slapd[4533]: conn=-1 fd=9 closed
Any clues?
TIA,
Ewald...
--
Ewald Beekman, Security Engineer, Academic Medical Center,
dept. ADB/ICT Computer & Network Services, The Netherlands
## Your mind-mint is:
Unless hours were cups of sack, and minutes capons, and clocks the tongues
of bawds, and dials the signs of leaping houses, and the blessed sun himself
a fair, hot wench in flame-colored taffeta, I see no reason why thou shouldst
be so superfluous to demand the time of the day. I wasted time and now doth
time waste me.
-- William Shakespeare
-------------------------------------------------------
This SF.net email is sponsored by: Get the new Palm Tungsten T
handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0002en
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
