Please review the following attached patch (using the attached test procedure) which addresses:
PKI TRAC Ticket #965 - Improve error message - remove ACL mapping to the user