Copyright © 2002 by PGP Corporation. All Rights Reserved.
This Tech Note describes how to set up and troubleshooting the querying and storage of PGP keys on iPlanet Directory Server.
PGP clients use the LDAP operational attribute namingContexts on root DSE (DSA Specific Entry) of LDAP Server to do automatic key space discovery. The automatic discovery works as follows. The PGP client tries to find <namingContexts>,CN=PGPServerInfo for each DN returned in the attribute value. This object is expected to be of class pgpServerInfo, which stores the DN of the PGP key store in its pgpBaseKeySpaceDN attribute. If your server returns non-blank value(s) in the attribute, you would need to create a pgpServerInfo object under any one of the naming contexts returned and the CN of this object must be "PGPServerInfo" and the mandatory attribute pgpBaseKeySpaceDN should be set to a valid DN that will be used as the key store. But when the server root DSE does not return this attribute or returns blank (meaning that it is a gateway or the server believes it contains the entire directory), you will need to specify the DN of your key space directly in your server definition in PGP client.
This version of iPlanet (and previous versions) does return this attribute on root DSE. The value(s) returned can be found by using any of the popular LDAP clients. If you use ldapsearch, the command should be something like ldapsearch –h <host> -p <port> -b “” –s base “(objectClass=*)” Look for all namingContexts returned. You would need to create the pgpServerInfo object under one of those nodes for automatic key space discovery to work. In the Directory tab page of the Directory Server, choose Object->New->Other… after choosing the parent node appropriately. Choose pgpServerInfo in the New Object pop-up and choose OK. Specify the DN of the PGP key store in the pgpbasekeyspacedn attribute. Make sure that the DN you specify is correct since there is no input check regarding syntax even though the attribute is specified to be of DN type. Change the naming attribute to be cn only by clicking the Change button. Press OK. Specify the cn to be PGPServerInfo after choosing the Show Attribute Names radio button in the View control group.
Your iPlanet Directory is now integrated with PGP.