[Pki-users] Dir based enrollment question

[Christina Fu]

Hi Sean,

I took a quick look of your profile.  You are using 
nsTokenDeviceKeySubjectNameDefaultImpl.  Unfortunately, unlike 
nsTokenUserKeySubjectNameDefaultImpl, which draws it's info form LDAP, 
nsTokenDeviceKeySubjectNameDefaultImpl does not.

If you just want to try i t out for a quick result, you might want to 
switch to using nsTokenUserKeySubjectNameDefaultImpl, instead.

Hope this helps.
Christina

Veale, Sean wrote:
>
> Is this bug fixed in the redhat  8.0 CS Alpha  release?
>
> _https://bugzilla.redhat.com/show_bug.cgi?id=487592_
>
> It seems I'm still running into it where when I set up the system for 
> directary based enrollment the attributes are not being filled in.
>
> I.e. I'll see the tag $request.mail$  for the subject alt name in the 
> cert instead of the users email address.
>
>
> I'm attaching a zip of the tps/ca CS.cfg the profile I am trying this 
> with, the debug logs of the tps and ca subsystems and the access log 
> of the dir srv instance.
>
> <<PropertiesFromLdap.zip>>
>
> sean
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Pki-users mailing list
> Pki-users at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-users