We need to add in the pkiCA, pkiUser, and deltaCRL ObjectClasses to be in compliance with RFC 4523 to our DS builds. Are these subset of objectClasses from RFC 4523 for Compliance with RFC 4523? If these are correct I will continue this to make recommended changes for the Attribute and ObjectClasses defined in RFC 4523 for 00core.ldif in conjunction to my testing to propose to the 389 community. objectClasses: ( 2.5.6.22 NAME 'pkiCA' DESC 'X.509 PKI Certificate Authority' SUP top AUXILIARY MAY ( cACertificate $ certificateRevocationList $ authorityRevocationList $ crossCertificatePair ) X-ORIGIN 'RFC 4523' ) objectClasses: ( 2.5.6.23 NAME 'deltaCRL' DESC 'X.509 delta CRL' SUP top AUXILIARY MAY deltaRevocationList X-ORIGIN 'RFC 4523') objectClasses: ( 2.5.6.21 NAME 'pkiUser' DESC 'X.509 PKI User' SUP top AUXILIARY MAY userCertificate X-ORIGIN 'RFC 4523') Thanks David M. Partridge -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.fedoraproject.org/pipermail/389-users/attachments/20091021/6e1623e3/attachment.html
