LDAP related stuff.
Details
Details
Description
Tue, Jan 13
Tue, Jan 13
• ebo edited projects for T7272: Kleopatra: Look up missing OpenPGP certificates for card keys, added: gpd5x (gpd-5.0.0); removed gpd5x.
Fri, Jan 9
Fri, Jan 9
• werner moved T7866: Allow separate LDAP keyserver for uploading from QA to WIP on the gnupg26 board.
timegrid added a comment to T7866: Allow separate LDAP keyserver for uploading.
The behaviour might have changed a bit because of the ldap: prefix i use now, or i have missed this case the last time:
Given some cert on the "download" server, I can find it, if dirmngr.conf contains only the "download" server, or if the "download" server is listed first:
• werner added a comment to T7866: Allow separate LDAP keyserver for uploading.
Independent of keyserver order in dirmngr.conf, --search-keys still offers keys from the upload server, but the download fails:
• werner added a comment to T7866: Allow separate LDAP keyserver for uploading.
For "Although the upload server is used for upload, the gpg message still displays the first keyserver" see T8025
• werner triaged T8025: Display the correct LDAP server in gpg if the upload flag is in use. as Normal priority.
Tue, Jan 6
Tue, Jan 6
timegrid moved T7272: Kleopatra: Look up missing OpenPGP certificates for card keys from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta479 @ win11.
Thu, Dec 18
Thu, Dec 18
• ebo updated subscribers of T6299: Kleopatra: Updating key does results in "not changed" instead of "not found".
@timegrid I would not tag this ticket with LDAP, as it is not LDAP specific
• ebo moved T6299: Kleopatra: Updating key does results in "not changed" instead of "not found" from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• ebo closed T6299: Kleopatra: Updating key does results in "not changed" instead of "not found" as Resolved.
State in Gpg4win-5.0.0-beta446 and vsd 3.3.4 is this:
So the message is "Update Failed" for keyserver and "not found" for WKD.
In light of that the ticket is this old, I'll leave it at that instead of discussing further improvements beyond this single phrase.
These would have to go in a new ticket.
Dec 12 2025
Dec 12 2025
timegrid moved T6299: Kleopatra: Updating key does results in "not changed" instead of "not found" from Backlog to QA on the gpd5x board.
timegrid edited projects for T6299: Kleopatra: Updating key does results in "not changed" instead of "not found", added: gpd5x, LDAP; removed Restricted Project.
timegrid moved T7272: Kleopatra: Look up missing OpenPGP certificates for card keys from Backlog to QA on the gpd5x board.
timegrid edited projects for T7272: Kleopatra: Look up missing OpenPGP certificates for card keys, added: gpd5x, LDAP; removed Restricted Project.
setting this to resolved, werner already tested this
Nov 27 2025
Nov 27 2025
timegrid changed the status of T7866: Allow separate LDAP keyserver for uploading from Testing to Open.
Tested on gpg4win-5.0.0-beta413 @ win11 with the following entries in dirmngr.conf:
Nov 21 2025
Nov 21 2025
Oct 23 2025
Oct 23 2025
Oct 22 2025
Oct 22 2025
• werner moved T7866: Allow separate LDAP keyserver for uploading from WIP to QA on the gnupg26 board.
Oct 21 2025
Oct 21 2025
• werner changed the status of T7866: Allow separate LDAP keyserver for uploading from Open to Testing.
Implemented but not tested at all.
Sep 24 2025
Sep 24 2025
• werner moved T5447: Add feature to delete a key from an LDAP server from QA to gnupg-2.2.49 on the gnupg22 board.
Sep 2 2025
Sep 2 2025
• werner moved T7742: Extend the LDAP scheme for non-NTDS installations from WIP to QA on the gnupg26 board.
Aug 4 2025
Aug 4 2025
• werner changed the status of T7742: Extend the LDAP scheme for non-NTDS installations from Open to Testing.
• werner added a comment to T7742: Extend the LDAP scheme for non-NTDS installations.
The advantage of using a fingerprint for referencing a key is that there won't be any collisions in the keyid. Further this unifies the schema with an LDS (Windows) installation where DNs must anyway be unique. But take care the client needs to support this new flag. This will be the case for gnupg >= 2.5.12 (cf. T7756)
• werner removed a project from T5447: Add feature to delete a key from an LDAP server: Restricted Project.
• werner moved T5447: Add feature to delete a key from an LDAP server from QA to Done on the gnupg26 board.
• werner moved T5447: Add feature to delete a key from an LDAP server from Backlog to QA on the gnupg22 board.
• werner moved T5447: Add feature to delete a key from an LDAP server from WiP to vsd-3.3.3 on the vsd33 board.
Jul 25 2025
Jul 25 2025
• werner moved T5447: Add feature to delete a key from an LDAP server from WIP to QA on the gnupg26 board.
• werner moved T5447: Add feature to delete a key from an LDAP server from Backlog to WiP on the vsd33 board.
• werner moved T5447: Add feature to delete a key from an LDAP server from Backlog to WIP on the gnupg26 board.
• werner changed the status of T5447: Add feature to delete a key from an LDAP server from Open to Testing.
Oct 9 2024
Oct 9 2024
• ebo edited projects for T5447: Add feature to delete a key from an LDAP server, added: vsd33; removed vsd33 (vsd-3.3.0).
• alexk added a project to T5447: Add feature to delete a key from an LDAP server: vsd33 (vsd-3.3.0).
May 27 2024
May 27 2024
• alexk added a comment to T5447: Add feature to delete a key from an LDAP server.
Also required for an actium feature with UI.
Sep 25 2023
Sep 25 2023
• werner edited projects for T5447: Add feature to delete a key from an LDAP server, added: Restricted Project; removed gnupg (gpg23).
Actually, a GUI to maintain the keys in an LDAP would be helpful for many sites.
Apr 21 2023
Apr 21 2023
• werner added a parent task for T6458: Support looking up userSMIMECertificate in LDAP: T6416: Remove LDAP code duplication in dirmngr.
Apr 19 2023
Apr 19 2023
Apr 12 2023
Apr 12 2023
• ebo moved T5441: Kleopatra: LDAP Search only shows one key from Restricted Project Column to Restricted Project Column on the Restricted Project board.
Mar 17 2023
Mar 17 2023
Feb 27 2023
Feb 27 2023
The code has meanwhile been reworked and the mentioned test server is not anymore available
Nov 17 2022
Nov 17 2022