Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007 Installation Manual page 832

must be entered manually. You must always enter several passwords (see
"Passwords during LDAP Export"
Table 42.3
Password
LDAP Password
Certificate Password
New Certificate Password
Certificates, CAs, and CRLs can be exported to LDAP.
Exporting a CA to LDAP
To export a CA, enter the CA as described in
a Sub-CA"
which opens the dialog for entering LDAP data. If your system has been configured
with the YaST LDAP client, the fields are already partly completed. Otherwise,
enter all the data manually. Entries are made in LDAP in a separate tree with the
attribute "caCertificate".
Exporting a Certificate to LDAP
Enter the CA containing the certificate to export then select Certificates. Select the
required certificate from the certificate list in the upper part of the dialog and select
Export > Export to LDAP. The LDAP data is entered here in the same way as for
CAs. The certificate is saved with the corresponding user object in the LDAP tree
with the attributes "userCertificate" (PEM format) and "userPKCS12" (PKCS12
format).
Exporting a CRL to LDAP
Enter the CA containing the CRL to export and select CRL. If desired, then create
a new CRL and export this with Export > To LDAP. The LDAP data is also entered
here in the same way as with CAs. Entries are then made in the LDAP at the same
point as the associated CA, but using the "certificateRevocationList" attribute.
814 Installation and Administration
(page 814)).
Passwords during LDAP Export
Meaning
Authorizes the user to make entries in the LDAP tree.
Authorizes the user to export the certificate.
The PKCS12 format is used during LDAP export.
This format forces the assignment of a new password
for the exported certificate.
(page 808). Select Extended > Export to LDAP in the subsequent dialog,
Section 42.2.2, "Creating or Revoking
Table 42.3,