Re: [OpenCA-Devel] LDAP: CA Cert base DN != end entity base DN?

[Michael B. <mic...@cm...>]

Hi Martin,

first you can configure the DN which is used for the CA certificate like 
mentioned by Dalini but nevertheless this DN is checked against the base 
DN too. The base DN is a protection against illegal DNs in the sense of 
the LDAP server but you can configure more than one base DN for one LDAP 
server. This is supported by OpenLDAP v2 for example.

This feature is documented in the OpenCA guide (Technology guide --> 
ldap stuff). Should we place this documentation in another section - 
perhaps admin?

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email: mic...@cm...
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): mic...@we...
Germany                                       http://www.openca.org