Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 629

Enabling Publishing
To enable LDAP publishing, select both Enable Publishing and Enable Default LDAP
3.
Connection options.
In the Destination section, identify the Directory Server instance.
Host name. Type the fully qualified DNS host name of the Directory Server. For
example: .
host1.example.com
If you configured the Directory Server for SSL client authenticated communication, the
name you enter here must match the component in the subject DN of the Directory
CN
Server's SSL server certificate. For example, the host name may look like
.
corpDirectory.example.com
Port number. Type the TCP/IP port number on which the Directory Server is listening
to certificate and CRL publishing requests from the Certificate Manager.
Directory manager DN. Type the distinguished name (DN) of the directory entry that
has directory manager privileges. The Certificate Manager uses this DN to access the
directory tree and to publish to the directory. The access control set up for this DN
determines whether the Certificate Manager can perform publishing. Typically, you
would want to enter the directory manager's DN because it has write permission to the
entire directory tree (the root DN). You could also create another DN that has limited
read-write permissions for only those attributes that the publishing system actually
needs to write.
Password. Type the password for this DN. The Certificate Manager saves this
password in the single sign-on password cache and uses it during startup. (If you
change the password, the server updates the single sign-on password cache with the
new password.)
Client certificate. Select the certificate you want the Certificate Manager to use for
SSL client authentication to the publishing directory. By default, the Certificate
Manager uses its SSL server certificate for this purpose.
LDAP version. Select the version of LDAP protocol appropriate to your version of
Directory Server. If the directory you want the Certificate Manager to publish to is
based on Red Hat Directory Server 1.x, select version 2. For Directory Server versions
3.x and later, select LDAP version 3.
Authentication. Select the authentication type appropriate to your Directory Server
configuration. The choices are and
Basic authentication SSL client
.
authentication
If you configured the Directory Server for basic authentication or for SSL
communication without client authentication, select and
Basic authentication
specify values for the Directory manager DN and password.
Chapter 16 Publishing 629