Re: [Pki-users] Dir based enrollment question
Hi Sean,
I took a quick look of your profile. You are using
nsTokenDeviceKeySubjectNameDefaultImpl. Unfortunately, unlike
nsTokenUserKeySubjectNameDefaultImpl, which draws it's info form LDAP,
nsTokenDeviceKeySubjectNameDefaultImpl does not.
If you just want to try i t out for a quick result, you might want to
switch to using nsTokenUserKeySubjectNameDefaultImpl, instead.
Hope this helps.
Christina
Veale, Sean wrote:
Is this bug fixed in the redhat 8.0 CS Alpha release?
_https://bugzilla.redhat.com/show_bug.cgi?id=487592_
It seems I'm still running into it where when I set up the system for
directary based enrollment the attributes are not being filled in.
I.e. I'll see the tag $request.mail$ for the subject alt name in the
cert instead of the users email address.
I'm attaching a zip of the tps/ca CS.cfg the profile I am trying this
with, the debug logs of the tps and ca subsystems and the access log
of the dir srv instance.
<<PropertiesFromLdap.zip>>
sean
------------------------------------------------------------------------
_______________________________________________
Pki-users mailing list
Pki-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-users