Ldapcrlmap Mapper; Ldapdncompsmap Plug-In Module - Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual

LdapCrlMap Mapper

The mapper named
The Certificate Manager automatically creates this mapper during installation.
You can use this mapper for creating an entry for the CA in the directory and for
mapping the CRL to the CA's entry in the directory.
By default, the mapper is configured to create an entry for the CA in the directory
and the default DN pattern for locating the CA's entry is as follows:
UID=$subj.cn,OU=people,O=$subj.o

LdapDNCompsMap Plug-in Module

The
LdapDNCompsMap
This mapper enables you to configure a Certificate Manager to map a certificate to
an LDAP directory entry by constructing the entry's distinguished name from
components (such as
then using it as the search DN to locate the entry in the directory. You can use this
mapper to locate the following:
• The CA's entry in the directory for publishing the CA certificate and the CRL.
• End-entity entries in the directory for publishing end-entity certificates.
The mapper requires you to specify values for three parameters,
dnComps
takes DN components to build the search DN. The mapper also takes an optional
root search DN. The server uses the DN components to form an LDAP entry to
begin a subtree search and the filter components to form a search filter for the
subtree. If none of the DN components are configured, the server uses the base DN
for the subtree. If the base DN is null and none of the DN components match, an
error is returned. If none of the DN components and filter components match, an
error is returned. If the filter components are null, a base search is performed.
Note that both
components or attributes separated by commas. The parameters don't accept
multiple entries of an attribute; for example, you can set
but not to
example, if your directory entries contain multiple
multiple
code for the
directory:
LdapCrlMap
plug-in module implements the DN components mapper.
, ,
CN OU O
, and , which are explained in Table 5-3. In general, the mapper
baseDN
and
DNComps filterComps
. If there's a need for you to support such a filter, for
CN,OU2,OU1
s in your
OU filterComps
LdapDNCompsMap
<server_root>/cms_sdk/cms_jdk/samples/mappers
is an instance of the
, and ) specified in the certificate subject name, and
C
parameters accept valid DN
for filtering entries, you can modify the source
module. The java class for the module is in this
Chapter 5
LdapDNCompsMap Plug-in Module
LdapCaSimpleMap
filterComps
to
filterComps
s and you want to use
OU
Mapper Plug-in Modules
module.
,
,
CN,OU
257