Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 30

The setpin Command
• [gen=RNG-alpha | RNG-alphanum | RNG-printableascii]
Use this argument to specify the type of characters for PINs. The characters in
the password can be constructed out of alphabetic characters (
alphanumeric characters (
(
• [case=upperonly]
Use this argument with the
characters is fixed to uppercase only; otherwise, the case is mixed. Restricting
alphabetic characters to uppercase reduces the overall combinations for the
password space significantly.
• [hash=sha1 | md5 | none]
Use this argument to specify the message digest algorithm the tool should use
to hash the PINs before storing them in the authentication directory. If you
want to store PINs as SHA-1 or MD5 hashed values in the directory, be sure to
specify an output file for storing PINs in plain text. You will need the PINs in
plain text for delivering them to end entities.
sha1
md5
none
• [output=<file_name>]
Use this argument to specify the absolute path to the file to which the tool
should write the PINs as it generates them; this is the file to which the tool will
capture the output.
If you don't specify a filename, the tool will write the output to the standard
output. In any case, all the error messages will be directed to the standard
error.
• [clobber]
Use this argument to specify whether the tool should overwrite preexisting
PINs, if any, associated with a DN (user). If specified, the tool overwrites the
existing PINs with the one it generates. Otherwise, it leaves the existing PINs
as they are.
• [write]
Use this argument to specify whether the tool should write PINs to the
directory. If specified, the tool writes PINs (as it generates) to the directory.
Otherwise, the tool does not make any changes to the directory.
30 Netscape Certificate Management System Command-Line Tools Guide • March 2002
).
printableascii
produces a 160-bit message digest. This option is used by default.
produces a 128-bit message digest.
does not hash the PINs.
), or any printable ASCII characters
RNG-alphanum
parameter. If you do, the case for all alphabetic
gen
),
RNG-alpha