Re: OpenLDAP + Netscape + S/MIME + Certificates

[Michael Ströder <michael@stroeder.com>]

Georg Thoma wrote:
> 
> Hello, is anyone using the function of netscape to publish your own
> public certificate to ldap?
> We try to use it, but it is not working.

I'm not using it but I tried and it seems to work on OpenLDAP 1.2.x.

> We get the following debug message at the ldap:
> Jul  2 17:03:00 mxtis slapd[20338]: conn=13504 op=0 BIND dn=""
> method=128
> Jul  2 17:03:00 mxtis slapd[20338]: conn=13504 op=0 RESULT tag=97 err=0
> text=
> Jul  2 17:03:00 mxtis slapd[25083]: conn=13504 op=1 SRCH
> base="o=tisconAG,c=de" scope=2 filter="(mail=g.thoma@tiscon.com)"
> Jul  2 17:03:00 mxtis slapd[25083]: conn=13504 op=1 SEARCH RESULT
> tag=101 err=0 text=
> Jul  2 17:03:00 mxtis slapd[14696]: conn=13504 op=2 MOD
> dn="uid=gth,ou=Mitarbeiter,o=tisconAG,c=DE"
> Jul  2 17:03:00 mxtis slapd[14696]: conn=13504 op=2 RESULT tag=103
> err=17 text=userSMimeCertificate;binary:  } ^H
> Jul  2 17:03:00 mxtis slapd[9673]: conn=13504 op=4 UNBIND

There's missing the BIND operation as DN of the entry
uid=gth,ou=Mitarbeiter,o=tisconAG,c=DE.

You might also have a schema configuration problem.

Ciao, Michael.