Hi,

In case you follow instructions from ChainOnUpdate page, http://directory.fedoraproject.org/wiki/Howto:ChainOnUpdate

note that in “Step 2 (Hub Only)” OID for

nsTransmittedControl: 2.16.840.1.113730.3.4.12

representing a proxied authorization control is an old OID of the control which newer version (version 2) is

                       2.16.840.1.113730.3.4.18

Hence, at least in my 389 DS, version 1.2.10.7, which rootDSE has the newer OID of the control among its supportedcontrol values it was required that

dn: cn=config,cn=chaining database,cn=plugins,cn=config

has

nsTransmittedControl: 2.16.840.1.113730.3.4.18

Otherwise, I kept receiving “Critical extension is unavailable (12)” error

 

Hope this may be helpful to someone.

 

Thanks,

Jovan

 

 

 

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users