> On 18 Nov 2020, at 11:45, Marc Sauton <msauton@xxxxxxxxxx> wrote: > > and add a > default:DNComps cn > to match the DN components > ? > That changes the search basedn, not the matched dn or attribute content. I think they want to put the cert subject in nsCertSubjectDN and search all BE's, especially if the SubjecDn doesn't have the components that can build into the basedn (IE most certs wont have dc). — Sincerely, William Brown Senior Software Engineer, 389 Directory Server SUSE Labs, Australia _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx