Mappers; Configuring Mappers - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Mappers

Table 16-7
Parameter
host
port
path
Mappers
Mappers are only used with LDAP publishing. Mappers allow you to define a relationship
between a certificates subject name and the DN of the directory entry in which the
certificate is published. The Certificate Manager needs to derive the DN of the entry from
the certificate or the certificate request so it knows in which directory entry to publish the
certificate or CRL. The mapper allows you to define a relationship between the DN for the
user entry and the subject name of the certificate, or some other input information. This
relationship can either be one in which the exact DN of the entry can be derived from the
information using the mapper to derive this DN, or one in which the information can be
used to search the directory and find the DN of the entry using the mapper to derive the
search criteria.

Configuring Mappers

During installation, the Certificate Manager automatically creates a set of mappers defining
the most common relationships. The default mappers are as follows:
•
LdapUserCertMap
in order to publish user certificates.
•
LdapCrlMap
order to publish the CRL.
•
LdapCaCertMap
in order to publish the CA certificate.
You can use these mappers, or create instances of the other LDAP mapper plug-ins
available and configure those.
610 Red Hat Certificate System Administrator's Guide • September 2005
OCSPPublisher Parameters
Description
Specifies the fully qualified hostname of the Online Certificate Status
Manager.
Specifies the port number on which the Online Certificate Status
Manager is listening to the Certificate Manager, this is the Online
Certificate Status Manager's end-entity SSL port number.
Specifies the path for publishing the CRL. Must be the default path,
/ocsp/addCRL.
—for locating the correct attribute of user entries in the directory
—for locating the correct attribute of the CA's entry in the directory in
—for locating the correct attribute of the CA's entry in the directory