Netscape MANAGEMENT SYSTEM 4.5 - COMMAND-LINE Manual page 29

specifies the TCP/IP port to bind to; the default port number
<port_number>
is the default LDAP port, 389.
• [certdb=<path> nickname=<certificate_nickname> |
"binddn=<user_id>" bindpw=<bind_password> [SSL=yes | no]]
Use this argument to specify how the tool should connect to the directory:
whether to use basic authentication, SSL, or SSL with client authentication. By
default, SSL is not used (
If you want the tool to use basic authentication, you must turn off SSL
( ) and enter the bind DN and password information. Do not enter
SSL=no
values for the remaining options.
If you want the tool to use SSL, you must turn on SSL (
the bind DN and password information. Do not enter values for the
remaining options.
If you want the tool to use SSL with client authentication, you must turn on
SSL (
SSL=yes
authentication and the path to the certificate database that contains this
certificate. You don't have to provide the bind DN and password.
specifies the path to the certificate database containing the client
<path>
authentication certificate to use for SSL client authentication. If you provide the
path to the certificate database (
assumed that the LDAP directory has been set up for SSL-based access. You
must also specify the certificate for SSL client authentication to the directory.
<certificate_nickname>
SSL client authentication to the directory. The tool looks for this certificate in
the database specified by the
a client certificate residing on a token or smart card to access the directory,
prefix the nickname with the word module (
#11 module will be used.
specifies the user ID that has read and write permission to the
<user_id>
LDAP directory; the PIN Generator binds to the directory as this user.
<bind_password>
write access to the LDAP directory.
If the bind password is not given at the command line, the tool prompts for it.
• [objectclass=<objectclass_to_add>]
Use this argument to specify the object class, if any, the tool should add to the
authentication directory. By default it is
).
SSL=no
) and enter the nickname of the certificate to use for SSL client
cert7.db
specifies the nickname of the certificate to use for
parameter value. If you want the tool to use
path
specifies the password for the user ID that has read and
SSL=yes
in Netscape Directory Server), it is
module:nickname
.
pinPerson
Chapter 4 PIN Generator Tool
The setpin Command
) and enter
); then a PKCS
29