Does this help - http://directory.fedora.redhat.com/wiki/Howto:CertMapping Yann wrote: >Hi all ! > >I use Fedora Directory Server 7.1 on Solaris 9, work great :-) >I use certificate authentication on SSL with SASL external methode, work great >when the corresponding DN entry in certificate) exist in LDAP directory. > >So, i tried to find a way to do that when no corresponding entry exist... but i >can't find how to... >I tried SASL mapping... >special ACL perhaps ? > >I know it's possible because that work with openLDAP (or perhaps it's a bug :-) > >So, anyone have succesfull bind with certificate authentication with SASL >external methode without correponding LDAP entry ? > >Thanks > >Yann > >Log ko without entry : > >[06/Feb/2006:22:13:02 +0000] conn=6 SSL 128-bit RC4; client CN=toto >titi,OU=TEST,O=TEST; issuer O=TEST >[06/Feb/2006:22:13:02 +0000] conn=6 SSL failed to map client certificate to LDAP >DN (No such object) >[06/Feb/2006:22:13:02 +0000] conn=6 op=0 BIND dn="cn=toto titi,OU=TEST,o=TEST" >method=sasl version=3 mech=EXTERNAL >[06/Feb/2006:22:13:02 +0000] conn=6 op=0 RESULT err=49 tag=97 nentries=0 etime=0 > > >Log ok with a corresponding entry : > >[06/Feb/2006:16:16:58 +0000] conn=108 SSL 128-bit RC4; client CN=toto >titi,OU=TEST,O=TEST; issuer O=TEST >[06/Feb/2006:16:16:58 +0000] conn=108 SSL client bound as cn=toto >titi,ou=TEST,o=TEST >[06/Feb/2006:16:16:58 +0000] conn=108 op=0 BIND dn="cn=toto titi,ou=TEST,o=TEST" >method=sasl version=3 mech=EXTERNAL > >-- >Fedora-directory-users mailing list >Fedora-directory-users at redhat.com >https://www.redhat.com/mailman/listinfo/fedora-directory-users > > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060207/7b7ff0d2/attachment.bin
