Table of Contents
Advertisement
UidPwdDirAuth Plug-in Module
These are the steps shown in Figure 1-2:
In the manual enrollment form, the end entity enters the information needed to
1.
request a certificate and submits the request to the server.
When the server receives the request, it automatically lists the request in a
2.
certificate request queue for an agent to process.
An agent verifies the authenticity of the request.
3.
When the server receives the agent-approved request, it subjects it to policy
4.
processing. For details, see Chapter 18, "Setting Up Policies" of CMS
Installation and Setup Guide.
The certificate is delivered to the email address specified in the certificate
request.
UidPwdDirAuth Plug-in Module
The
UidPwdDirAuth
authentication method. You can use this module for authenticating end users,
provided their information is stored in an LDAP directory, during certificate
enrollment.
Here's how the enrollment method works: as part of configuring a Certificate
Manager and a Registration Manager, or both, for authentication, you specify an
LDAP directory that the server must use to authenticate end users. End users enroll
for a certificate by entering their user IDs and passwords for this authentication
24
Netscape Certificate Management System Plug-ins Guide • October 2001
If the request is from a valid end entity, the agent verifies that all the
information the end entity has provided in the request is correct, makes
required modifications, if any, and approves the certificate request for
issuance.
If the request is from an invalid end entity, the agent rejects the request,
which in turn triggers a rejection notification to the end entity.
If the request fails any of the configured policies, the server rejects the
request, logs an error message, and sends a rejection notification to the end
entity.
If the request passes all the configured policies, the server issues the
certificate.
plug-in module implements the directory-based
Advertisement
Table of Contents
