Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: NESCM with Windows CA generated user certificates

8 views
Skip to first unread message

Marcel Cox

unread,
Jan 13, 2010, 3:16:09 AM1/13/10
to
fhettlich wrote:

>- Is the successful checking of the revocation list necessary for a
>successful eDirectory login?

No. It's a choice you make in the NESCM configuration in eDirectory. You
can configure whether a revocation list is used and what mechanism is to
be used.

--
Marcel Cox
http://support.novell.com/forums
------------------------------------------------------------------------
Marcel Cox's Profile: http://forums.novell.com/member.php?userid=8

Marcel Cox

unread,
Jan 15, 2010, 4:07:11 PM1/15/10
to
fhettlich wrote:

>"Invalid: Can't construct certificate chain"

You need to have your complete certificate chain in the trusted root
store. It is not enough to have the CA certificate that was used to sign
the smartcard certificates in case that CA certificate is signed by
another authority.

0 new messages