[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Component Matching / certificateMatch

To: Kai Kramer <kai.kramer@googlemail.com>
Subject: Re: Component Matching / certificateMatch
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Wed, 15 Feb 2006 05:47:10 -0800
Cc: OpenLDAP-software@OpenLDAP.org
In-reply-to: <340ae0a80602150049v50a0da5bt@mail.gmail.com>
References: <340ae0a80602150049v50a0da5bt@mail.gmail.com>

Component matching is considered experimental in OpenLDAP
Software.  As indicated by ITS#4112 and -devel list
discussions, it needs work.

Kurt

At 12:49 AM 2/15/2006, Kai Kramer wrote:
>Hello,
>
>is component matching already usable in a production environment? Does
>anyone really use it? ITS4112 seems to be a serious problem.
>
>What about certificate matching rules as an alternative? I managed to
>use certificateExactMatch to search for serial number and issuer. But
>I had no success with certificateMatch. Is it possible to search for a
>certain key usage?
>
>
>Regards,
>Kai

Follow-Ups:
- Re: Component Matching / certificateMatch
  - From: "Keutel, Jochen" <mlists@keutel.de>

References:
- Component Matching / certificateMatch
  - From: Kai Kramer <kai.kramer@googlemail.com>

Prev by Date: Re: migrating data from ldbm to bdb
Next by Date: current password expiration methods
Index(es):
- Chronological
- Thread