[XrcXUDADUNABLE]: unable to contact directory server

Keon Key Recovery Module 6.5
Keon Certificate Authority 6.5
Sun Solaris 2.8
nCipher

[XrcXUDADUNABLE]: unable to contact directory server
An error ([XrcXUDADUNABLE]: unable to contact directory server) was encountered in generating your encryption certificate.  If the cause of the problem is not evident, you will need to contact the administrator of this system to proceed further.

This fault can occur if the KKRM values added to xudad.conf are not in the correct location. See page 26 of the Keon Key Recovery Administrator's Guide for more information.

The exact location for the entries needs to be between the "database caoperations" section" and the next section which starts "database services". For example, if your file reads as follows:

#######################################################################
# ldbm database definitions
#######################################################################

database          caoperations
suffix            "o=ca,o=services"
sslonly           1
http-publish-host www.acme.com
http-publish-port 447

database        services
suffix          o=services

database        acl
suffix          o=acl

Then this would be modified to read:

#######################################################################
# ldbm database definitions
#######################################################################

database          caoperations
suffix            "o=ca,o=services"
sslonly           1
http-publish-host www.acme.com
http-publish-port 447

database        krsoperations
suffix        "o=krs,o=services"
sslonly        1
operatorsNeeded        2
operatorsTotal        3

database        services
suffix          o=services

database        acl
suffix          o=acl

For more information, see the solution regarding [XrcXUDADUNABLE]: unable to contact directory server.