<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word" xmlns:m =
"http://schemas.microsoft.com/office/2004/12/omml"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3429" name=GENERATOR>
<STYLE>@font-face {
font-family: Calibri;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; }
P.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
LI.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
DIV.MsoNormal {
FONT-SIZE: 11pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: "Calibri","sans-serif"; mso-style-type: personal-compose
}
.MsoChpDefault {
mso-style-type: export-only
}
DIV.Section1 {
page: Section1
}
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV dir=ltr align=left><SPAN class=107214116-16122008><FONT face=Arial
color=#0000ff size=2>I ran into some thing like this when I also first began to
configure CA etc. Not enough documentation</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=107214116-16122008><FONT face=Arial
color=#0000ff size=2>for beginners. I had to get Wireshark and trace what
network packets are sent across from client to server</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=107214116-16122008><FONT face=Arial
color=#0000ff size=2>and see the LDAP credentials searched for and then I acted
accordingly. i.e when I see that the search was for uid=abc,
o=TokenUser</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=107214116-16122008><FONT face=Arial
color=#0000ff size=2>then I setup such in the Directory Server. Only
because I had access to both client and server. Wireshark helped me a
lot!</FONT></SPAN></DIV>
<DIV> </DIV><!-- Converted from text/rtf format -->
<P><I><SPAN lang=en-us><FONT face="Arial Narrow" size=2>From: Julius
Adewumi</FONT></SPAN></I> <BR><I><SPAN lang=en-us><FONT face="Arial Narrow"
size=2>@GDC4S.com</FONT></SPAN></I> <BR><I><SPAN lang=en-us><FONT
face="Arial Narrow" size=2>Ph:480-441-6768</FONT></SPAN></I> <BR><I><SPAN
lang=en-us><FONT face="Arial Narrow" size=2>Contract
Corp:MTSI</FONT></SPAN></I><SPAN lang=en-us></SPAN> </P>
<DIV> </DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> pki-users-bounces@redhat.com
[mailto:pki-users-bounces@redhat.com] <B>On Behalf Of </B>Zach
Casper<BR><B>Sent:</B> Tuesday, December 16, 2008 9:00 AM<BR><B>To:</B>
pki-users@redhat.com; 'General discussion list for the Fedora Directory server
project.'<BR><B>Subject:</B> [Pki-users] LDAP
Authentication<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=Section1>
<P class=MsoNormal>We have followed all steps to install/run Fedora Dogtag/FDS
using default settings. <o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>We have also added users/certificates from within the CA/RA
subsystems. <o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>We are now to the point we need to format and enroll some
smart cards, however, the LDAP Authentication dialog appears and no combination
of LDAP User ID/Password work. <o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>We’ve tried cn=Directory Manager, Admin, pkiuser…all without
luck. <o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>I know we must have users already in FDS but this
documentation seems not to exist. <o:p></o:p></P>
<P class=MsoNormal><o:p> </o:p></P>
<P class=MsoNormal>How do we either add users in FDS so that we can continue to
format and enroll smart cards? Are we missing something? <o:p></o:p></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 10pt">--<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 10pt">Zach
Casper<o:p></o:p></SPAN></P>
<P class=MsoNormal><SPAN style="FONT-SIZE: 10pt">Envieta
LLC<o:p></o:p></SPAN></P>
<P class=MsoNormal><o:p> </o:p></P></DIV></BODY></HTML>