Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 618

Mappers
Note that both
attributes separated by commas. The parameters don't accept multiple entries of an
attribute; for example, you can set
there's a need for you to support such a filter, for example, if your directory entries contain
multiple
you can modify the source code for the
module is in this directory:
The discussion below explains how mapping by DN components works. It is recommended
that you read this before configuring a Certificate Manager to use this mapper.
Subject names in certificates are in distinguished-name format. A distinguished name (DN)
uniquely identifies an entry in an LDAP directory. The DN consists of components that help
identify the entry; for details, see Appendix I, "Distinguished Names
The following components are commonly used in DNs:
•
UID
•
CN
•
OU
•
O
•
L
•
ST
•
C
For example, the following DN represents the user named Jane Doe who works for the
Sales department at Example Corporation, which is located in Mountain View in the state of
California, United States:
CN=Jane Doe, E=jdoe@example.com, OU=Sales, O=Example Corporation,
L=Mountain View, ST=California, C=US
The Certificate Manager uses the components in subject names to construct a DN that it can
use as the base for searching specific directory entries in order to publish the corresponding
certificate information.
For example, suppose the subject name in the certificate is in this form:
CN=Jane Doe, OU=Sales, O=Example Corporation, L=Mountain View,
ST=California, C=US
618 Red Hat Certificate System Administrator's Guide • September 2005
and
DNComps
s and you want to use multiple
OU
<server_root>/CS_sdk/CS_jdk/samples/mappers
, which represents the user ID of a user in the directory
, which represents the common name of a user in the directory
, which represents an organizational unit in the directory
, which represents an organization in the directory
, which represents a locality in the directory
, which represents a state in the directory
, which represents a country in the directory
parameters accept valid DN components or
filterComps
to
filterComps
s in your
OU
LdapDNCompsMap
, but not to
CN,OU CN,OU2,OU1
for filtering entries,
filterComps
module. The java class for the
. If