Hi Sean, I took a quick look of your profile. You are using nsTokenDeviceKeySubjectNameDefaultImpl. Unfortunately, unlike nsTokenUserKeySubjectNameDefaultImpl, which draws it's info form LDAP, nsTokenDeviceKeySubjectNameDefaultImpl does not. If you just want to try i t out for a quick result, you might want to switch to using nsTokenUserKeySubjectNameDefaultImpl, instead. Hope this helps. Christina Veale, Sean wrote:

Is this bug fixed in the redhat 8.0 CS Alpha release?

_https://bugzilla.redhat.com/show_bug.cgi?id=487592_

It seems I'm still running into it where when I set up the system for directary based enrollment the attributes are not being filled in.

I.e. I'll see the tag $request.mail$ for the subject alt name in the cert instead of the users email address.

I'm attaching a zip of the tps/ca CS.cfg the profile I am trying this with, the debug logs of the tps and ca subsystems and the access log of the dir srv instance.

<<PropertiesFromLdap.zip>>

sean

------------------------------------------------------------------------

_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users