Mapper Plug-In Modules Reference - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Mapper Plug-in Modules Reference

This section describes the mapper plug-in modules provided for the Certificate Manager.
You can use these modules to configure a Certificate Manager to enable and configure
specific Mapper instances.
The available mapper plug-in modules include the following:
• LdapCaSimpleMap
• LdapDNExactMap
• LdapSimpleMap
• LdapSubjAttrMap
• LdapDNCompsMap
You can develop a custom mapper module using the CS SDK.
LdapCaSimpleMap
The
LdapCaSimpleMap
automatically create an entry for the CA in an LDAP directory and then map the CA's
certificate to the directory entry by formulating the entry's DN from components specified
in the certificate request, certificate subject name, certificate extension, and attribute
variable assertion (AVA) constants. For more information on AVAs, check the directory
documentation.
The CA certificate mapper allows you to specify whether to create an entry for the CA or to
just map the certificate to an existing entry, or to do both.
Note that if you already have one CA entry created in the publishing directory and if you
change the value assigned to the
different, but with the same UID and O attributes, the mapper will fail to create the second
CA entry. For example, if the directory already has a CA entry with
UID=CA,OU=Marketing,O=example.com
another CA entry with
fail.
The reason for the failure may be because you are using a directory (for example, the
configuration directory) that has the uid uniqueness plug-in set to a specific base DN in the
file. This setting prevents the directory from having two entries with
slapd.ldbm.conf
the same UID under that base DN. For example, it prevents the directory from having two
entries under
O=example.com
plug-in module enables you to configure a Certificate Manager to
parameter of this mapper to something
dnPattern
and if you configure the mapper to create
UID=CA,OU=Engineering,O=example.com
with the same UID,
, the operation will
.
CA
Chapter 16
Mappers
Publishing 613