Re: Certificate Subject DN...
From: William Adams (w.adams@nexor.co.uk)
Date: 11/28/02
- Next message: Help: "Re: Locked out of disk!"
- Previous message: JR: "Re: Service Ticket Request Failed - 677?"
- In reply to: David Cross [MS]: "Re: Certificate Subject DN..."
- Next in thread: David Cross [MS]: "Re: Certificate Subject DN..."
- Reply: David Cross [MS]: "Re: Certificate Subject DN..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "William Adams" <w.adams@nexor.co.uk> Date: Thu, 28 Nov 2002 17:01:00 -0000
Why would you say this is an odd requirement? Isn't it reasonable to be able
to get to a certificate (via LDAP or ADSI) from the subject of a
certificate.
"David Cross [MS]" <dcross@online.microsoft.com> wrote in message
news:#p9Q9wvlCHA.1824@tkmsftngp04...
> Unfortunately this is a limitation of the Windows 2000 CA, it does not
> include the full DN. The Windows .NET CA has removed this limitation.
>
> Note if you are using checkpoint, the latest version of their software no
> longer requires this odd requirement.
>
> --
>
>
> David B. Cross [MS]
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> http://support.microsoft.com
>
> "William Adams" <w.adams@nexor.co.uk> wrote in message
> news:#Ghg6BvlCHA.2224@tkmsftngp02...
> > Hi,
> >
> > I have set up an Enterprise CA, I can happily issue certificates to
> people.
> > However I have a problem, I have a security program that relies on the
> > subject DN in the certificate to be the actual DN of the user in the
> Active
> > Directory. By default with a 'user' certificate template it is the email
> > address of the form CN=Bob Bloggs,emailAddress=Bob@bloggs.com. If you
use
> > the 'Exchange user' template then it specifies a DN but this DN is made
up
> > from what the user specifies on the form. Both of these methods mean the
> > subject DN in the certificate bears no relation to the active directory.
> >
> > Any ideas on how to make the subject DN reflect the location of the user
> in
> > the directory?
> >
> > -Will
> >
> >
>
>
- Next message: Help: "Re: Locked out of disk!"
- Previous message: JR: "Re: Service Ticket Request Failed - 677?"
- In reply to: David Cross [MS]: "Re: Certificate Subject DN..."
- Next in thread: David Cross [MS]: "Re: Certificate Subject DN..."
- Reply: David Cross [MS]: "Re: Certificate Subject DN..."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
