--On Friday, September 13, 2024 10:59 AM -0400 Brendan Kearney bpk678@gmail.com wrote:
sadly, my command-line-fu is lacking and most of the tools i use will not work (they all crash and cannot enumerate the base of dc=bpk2,dc=com). i am trying:
ldapdelete "cACertificate;binary,dc=bpk2,dc=com" and ldapdelete "cACertificate,dc=bpk2,dc=com"
but both attempts return:
ldap_delete: Invalid DN syntax (34) additional info: invalid DN
ldapdelete is for deleting entire entries. If you want to remove attributes, you use ldapmodify.
ldapmodify ... dn: ... changetype: modify delete: cACertificate - delete: cAPrivateKey - delete: objectClass objectClass: autoCA
--Quanah