Table of Contents
Advertisement
SubjectDirectoryAttributesExt Plug-in Module
The subject directory attributes extension policy in Certificate Management System
allows you to include up to three directory attributes in the extension. For each
attribute that you want to include in the extension, you need to specify the attribute
name and its value—the name must be the X.500 directory attribute name itself and
the attribute value can be derived from the request or directly entered in the policy
configuration as a string value.
The list of directory attributes supported by default are shown as permissible
values for the
on page 241. You can extend the list of attributes supported by the policy by
defining new X.500 directory attributes. For details on defining new attributes, see
"Extending Attribute Support" on page 316.
Note that, during installation, Certificate Management System does not create an
instance of the subject directory attributes extension policy. If you want the server
to add this extension to certificates, you must create an instance of the
SubjectDirectoryAttributesExt
section "Step 4. Add New Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Configuration Parameters of
SubjectDirectoryAttributesExt
In the CMS configuration file, the
identified as
class=com.netscape.certsrv.policy.SubjectDirectoryAttributesExt
where
In the CMS window, the module is identified as
SubjectDirectoryAttributesExt
parameters for the module are displayed in the CMS window.
240
Netscape Certificate Management System Plug-ins Guide • October 2001
attribute<n>.attributeName
<subsystem>.Policy.impl.SubjectDirectoryAttributesExt.
is
or
<subsystem>
ca
parameter explained in Table 4-27
module and configure it. For instructions, see
SubjectDirectoryAttributesExt
(prefix identifying the subsystem).
ra
. Figure 4-28 shows how the configurable
module is
,
Advertisement
Table of Contents
