Hi,
In case you follow instructions from ChainOnUpdate page,
http://directory.fedoraproject.org/wiki/Howto:ChainOnUpdate
note that in "Step 2 (Hub Only)" OID for
nsTransmittedControl: 2.16.840.1.113730.3.4.12
representing a proxied authorization control is an old OID of the control which newer
version (version 2) is
2.16.840.1.113730.3.4.18
Hence, at least in my 389 DS, version 1.2.10.7, which rootDSE has the newer OID of the
control among its supportedcontrol values it was required that
dn: cn=config,cn=chaining database,cn=plugins,cn=config
has
nsTransmittedControl: 2.16.840.1.113730.3.4.18
Otherwise, I kept receiving "Critical extension is unavailable (12)" error
Hope this may be helpful to someone.
Thanks,
Jovan