Can I Use LDIFDE to retrieve CRL from AD?

[Ohaya]

Hi,

I really don't know much about working with Active Directory, so my
apologies if I'm using the wrong terminology in this post!


We have two Windows 2000 Server machines.

One has Active Directory running, and I've been told that they have a
"CA" object, with the CRL associated with the CA as the "CRL" attribute
of the "CA" object.

I need to get a copy of the CRL onto the 2nd Windows Server machine from
within the AD on the 1st Windows Server machine, and I am wondering if
this could be done with ldifde.exe?

In other words, if the machine with AD is "Server1", and the other
machine is "Server2", can I run ldifde on Server2 like:

ldifde -f retrieved.crl -s Server1 ---- some other parameters -----??


If this will work, can someone tell me what other parameters I would
need in the ldifde command line??


If this won't work, how else can I accomplish this?

Thanks in advance!

Jim

 

[Ohaya]

Hello,

Ok, I've figured this one out, at least partially.

The problem that I'm stuck with now is that in the file that it
exports, LDIFDE includes several additional (3 actually) text lines
indicating the attribute name, etc.

I can edit the lines out, and then the resultant file works as a .CRL,
but I was wondering if there's any way to get LDIFDE to suppress those
extra lines?

Thanks,
Jim

 

[Ohaya]

Hi,

I posted the following msgs last Friday, and have not received any
responses, and I'm not sure why.

I don't mean this the way that it probably sounds, but it surprises me
that a later post (by someone else) that at least some of you think is a
troll received 8 responses.

Anyway, I'm hoping that the reason for non-response was that it got lost
on the news server somewhere (it seems the servers were clogged this
weekend), and am still trying to determine if there's a way to
accomplish this without using another program to edit out the headers
from the LDIF file that LDIFDE outputs.

Also, if anyone is so kind as to respond, I have an additional question
regarding LDIFDE: Does LDIFDE work only with AD, or will it work with
any LDAP-compliant server (e.g., AD/AM, OpenLDAP, etc.)?

Thanks in advance!!!