Hello.
I'm trying to add LDAP support to my openca pki.

When I import data from higher level to RA I get this error,
which I cannot solve:

Importing CA-Certificates into ldap ...
Cannot write CA-Certificate b138561c768c72828f62c2879c098639 to LDAP.
(error 21: LDAP-add failed: objectclass: value #2 invalid per syntax)

here some more information about my system (openca 0.9.2.x)

ldap.xml
    <suffix>
      <dn>o=OCSP BSc.,c=DE</dn>
    </suffix>
    <host>localhost</host>
    <port>389</port>
    <login>cn=admin,o=OCSP BSc.,c=DE</login>
    <passwd>geheim</passwd>

slapcat
-------
dn: o=OCSP BSc.,c=DE
o: OCSP BSc.
objectClass: organization
structuralObjectClass: organization
entryUUID: 89004baa-9c6f-1029-905e-a6630c9866c7
creatorsName: cn=anonymous
modifiersName: cn=anonymous
entryCSN: 20050808154757Z#000001#00#000000

dn: cn=admin,o=OCSP BSc.,c=DE
objectClass: simpleSecurityObject
objectClass: organizationalRole
cn: admin
description: LDAP administrator
userPassword:: e2NyeXB0fUdiaDFVaGxVWEplVFU=
structuralObjectClass: organizationalRole

dn: ou=ThePKI,o=OCSP BSc.,c=DE
ou: ThePKI
objectClass: top
objectClass: organizationalUnit
objectClass: pkiUser
objectClass: pkiCA
structuralObjectClass: organizationalUnit


syslog when adding cacert
-------------------------

slapd[11305]: do_add
slapd[11305]: >>> dnPrettyNormal: <CN=root,OU=ThePKI,o=OCSP BSc., c=DE>
slapd[11305]: <<< dnPrettyNormal: <cn=root,ou=ThePKI,o=OCSP BSc.,c=DE>,
                                  <cn=root,ou=thepki,o=ocsp bsc.,c=de>
slapd[11305]: do_add: dn (cn=root,ou=ThePKI,o=OCSP BSc.,c=DE)
slapd[11305]: conn=3 op=4 ADD dn="cn=root,ou=ThePKI,o=OCSP BSc.,c=DE"
slapd[11305]: dn2entry_r: dn: "cn=root,ou=thepki,o=ocsp bsc.,c=de"
slapd[11305]: => dn2id( "cn=root,ou=thepki,o=ocsp bsc.,c=de" )
slapd[11305]: => ldbm_cache_open( "dn2id.dbb", 73, 600 )
slapd[11305]: <= ldbm_cache_open (cache 0)
slapd[11305]: <= dn2id NOID
slapd[11305]: dn2entry_r: dn: "ou=thepki,o=ocsp bsc.,c=de"
slapd[11305]: => dn2id( "ou=thepki,o=ocsp bsc.,c=de" )
slapd[11305]: ====> cache_find_entry_ndn2id("ou=thepki,o=ocsp

                                             bsc.,c=de"): 3 (1 tries)
slapd[11305]: <= dn2id 3 (in cache)
slapd[11305]: => id2entry_r( 3 )
slapd[11305]: ====> cache_find_entry_id( 3 ) "ou=ThePKI,o=OCSP

                                  BSc., c=DE" (found) (1 tries)
slapd[11305]: <= id2entry_r( 3 ) 0x623c50 (cache)
slapd[11305]: ldbm_referrals: op=104 target="cn=root,ou=ThePKI,o=OCSP
                      BSc.,c=DE" matched="ou=ThePKI,o=OCSP BSc.,c=DE"
slapd[11305]: ====> cache_return_entry_r( 3 ): returned (0)
slapd[11305]: send_ldap_result: conn=3 op=4 p=3
slapd[11305]: send_ldap_result: err=21 matched="" text="objectclass:
                                        value #2 invalid per syntax"
slapd[11305]: send_ldap_response: msgid=5 tag=105 err=21
slapd[11305]: conn=3 op=4 RESULT tag=105 err=21 text=objectclass: value
                                                  #2 invalid per syntax


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to