On 18 Nov 2020, at 11:45, Marc Sauton <msauton(a)redhat.com>
wrote:
and add a
default:DNComps cn
to match the DN components
?
That changes the search basedn, not the matched dn or attribute content. I think they want
to put the cert subject in nsCertSubjectDN and search all BE's, especially if the
SubjecDn doesn't have the components that can build into the basedn (IE most certs
wont have dc).
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server
SUSE Labs, Australia