T.R | Title | User | Personal Name | Date | Lines |
---|
2481.1 | | IOSG::CARLIN | Dick Carlin IOSG, Reading, England | Fri Jan 24 1997 10:11 | 36 |
| M�rcia
(Distinguished Names)
---------------------
Distinguished Names typically would not include ADMD and PRMD
components, in fact the default X.500 schema probably wouldn't allow
them. A and P are X.400 domain concepts and would form part of an O/R
address (this is the mail address and should not be confused with DN).
A DN is typically a hierarchy of elements chosen from the following:
C O OU L CN
The advice usually given is to make the hierarchy as flat as possible.
Levels in the hierarchy should only be introduced for (X.500)
management domain reasons. (That's a gross simplification).
So, your simplified DN for the ALL-IN-1 User Agent entry would be
something like:
/C=BR/O=EMBRATEL/CN=ALL-IN-1_nodename
and users could be something like:
/C=BR/O=EMBRATEL/OU=Strings/CN=Alirio Diaz
(Search Bases)
--------------
There is no problem with local and global being the same. This will
probably be true of several sites. Local should contain all users on
that ALL-IN-1 system. So, as you say, it probably needs to include all
OUs.
Dick
|
2481.2 | ...and for X.400 O/R Addreses | IOSG::WRENI | | Fri Jan 24 1997 12:24 | 18 |
|
M�rcia,
As you're probably aware, you'll have to plan your X.400 O/R Addresses
aswell as your X.500 DNs.
As you intend to connect your Mailbus 400 MTA to the outside world via
the EMBRATEL ADMD then you should use O/R Addresses that include that
domain; to save the effort of changing all your O/R Addresses when you
do eventually connect.
Your O/R Addresses will thus be something like,
c=br;a=embratel;p=ebt;o=embratel;cn=marcia abreu
depending upon whether or not you decide to include any org units.
Ian
|
2481.3 | Not working ... another problem | VAXRIO::63230::abreu | | Fri Jan 24 1997 13:51 | 14 |
| Hi,
I was trying to create the distinguished name but it says that , an error is
shown because there is no superior entries.
I 'm using this :
/C=br/o=embratel/cn=ALL-IN-1_nodename
I tried to use DXIM to create /C=BR/o=embratel but DXIM is not available .
What is missing ?
Thanks .. Marcia
|
2481.4 | | AIMTEC::ZANIEWSKI_D | Taking bids on Andrew's Alphatraz cell | Fri Jan 24 1997 13:54 | 4 |
| Probably X.500 is missing. Did you try DXIM/INTERFACE=CHARACTER
just to be sure?
Dave Zaniewski
|
2481.5 | I tried the right command but ... | VAXRIO::63230::abreu | | Fri Jan 24 1997 14:02 | 14 |
| Hi,
Yes, I tried DXIM/Interface=character_cell.
And X.500 is not missing because I ran again @sys$startup:DXD$DSA_CONFIGURE and after that
I created and enabled the DSA , created the dsa naming context and ran @sys$startup:DUA_CONFIGURE.
If I use ncl , I can see it running.
Any ideas ?
Thanks .. Marcia
|
2481.6 | | IOSG::CARLIN | Dick Carlin IOSG, Reading, England | Mon Jan 27 1997 09:48 | 8 |
|
> I tried to use DXIM to create /C=BR/o=embratel but DXIM is not
> available .
What exactly did you mean by "not available"? Error message? Image not
found?
Dick
|
2481.7 | DXIM is available but I didn't have success with MAE | VAXRIO::63230::abreu | | Mon Jan 27 1997 16:41 | 29 |
| Hi Dick,
The DXIM problem was solved , I reinstalled X.500 and DXIM is
available.
My problem right now is that I can't create the distinguished name
(option: SM MXD MAE) because ALL-IN-1 returns me the following message:
"You must enter a value whose superior entries already exist"
I tried to create the following Distinguished name :
/C=BR/O=EBT/CN=ALL-IN-1_nodename
So, I guessed that maybe I should have to create an entry using DXIM,
then I tried the following :
DXIM> create entry /C=BR/O=EBT attributes objectClass=organization
But DXIM returns me an error:
DSA error: No such entry exists.
Matched the following part of the entry name '/'.
Any ideas .. what can I do to be able to create succesfully the
distinguished name ?
Thanks .. Marcia
|
2481.8 | | IOSG::BILSBOROUGH | SWBFS | Mon Jan 27 1997 19:19 | 14 |
|
Hi,
In NCL do
SHOW DSA NAMING CONTEXT *
If it returns no entries create yourself a naming context.
e.g.
In NCL
CREATE DSA NAMING CONTEXT "/C=GB"
Mike
|
2481.9 | | IOSG::CARLIN | Dick Carlin IOSG, Reading, England | Tue Jan 28 1997 09:56 | 11 |
| Marcia
It might be better to make the naming context /c=br/o=ebt. You can
create the naming context before the named entry exists.
Make sure that you have done all the steps in the DEC X.500 Directory
Service Management Guide sections 2.2 & 2.5 at least (my guide is old
but I assume the headings are roughly the same now, the sections are
"Configuring CN=DSA1" and "Creating Entries ...").
Dick
|
2481.10 | Worked | VAXRIO::ABREU | | Mon Feb 03 1997 17:28 | 7 |
| Hi Dick,
I created the naming context and the configuration worked fine.
Thanks for the help!
Marcia
|