Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 138

AuthInfoAccessExt Plug-in Module
Description of parameters defined in the AuthInfoAccessExt module (Continued)
Table 4-2
Parameter Description
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see section "Using Predicates in Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Example: HTTP_PARAMS.certType==client
Specifies whether the extension should be marked critical or noncritical in certificates
critical
specified by the predicate parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
Specifies the total number of access locations to be contained or allowed in the
numADs
extension.
By default, this field is set to 3 and the UI shows fields for configuring three locations.
You can change the total number of locations by changing the value assigned to this
parameter; there's no restriction on the total number of locations you can include in
the extension.
Note that each location has its own set of configuration parameters and you must
specify appropriate values for each of those parameters; otherwise the policy rule will
return an error. Each set of configuration parameters is distinguished by <n>, which
is an integer derived from the value you assign in this field. For example, if you set
the numADs parameter to 2, <n> would be 0 and 1.
Permissible values: 0 or n.
• 0 specifies that no locations can be contained in the extension.
• n specifies the total number of locations to be included in the extension; it must be
Example: 2
Specifies the access method for retrieving additional information about the CA that
ad<n>_method
has issued the certificate in which the extension appears.
Permissible values:
• ocsp (or 1.3.6.1.5.5.7.48.1).
• caIssuers (or 1.3.6.1.5.5.7.48.2).
• renewal (or 2.16.840.1.113730.16.1)
Example 1: ocsp
Example 2: 1.3.6.1.5.5.7.48.1
138 Netscape Certificate Management System Plug-ins Guide • October 2001
an integer greater than zero. The default value is 3.