Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 258

LdapDNCompsMap Plug-in Module
The discussion below explains how mapping by DN components works. It is
recommended that you read this before configuring a Certificate Manager to use
this mapper.
Subject names in certificates are in distinguished-name format. A distinguished name
(DN) uniquely identifies an entry in an LDAP directory. The DN consists of
components that help identify the entry; for details, see Appendix , "Distinguished
Names."
The following components are commonly used in DNs:
•
UID
•
CN
•
OU
•
O
•
L
•
ST
•
C
For example, the following DN represents the user named Jane Doe who works for
the Sales department at Siroe Corporation, which is located in Mountain View in
the state of California, United States:
CN=Jane Doe, E=jdoe@siroe.com, OU=Sales, O=Siroe Corporation,
L=Mountain View, ST=California, C=US
The Certificate Manager uses the components in subject names to construct a DN
that it can use as the base for searching specific directory entries in order to publish
the corresponding certificate information.
For example, suppose the subject name in the certificate is in this form:
CN=Jane Doe, OU=Sales, O=Siroe Corporation, L=Mountain View,
ST=California, C=US
The Certificate Manager can use some or all of these components (
and
C
can specify the components the server should use to build a DN (that is,
components to match attributes in the directory). You do this by configuring the
dnComps
258 Netscape Certificate Management System Plug-ins Guide • October 2001
, which represents the user ID of a user in the directory
, which represents the common name of a user in the directory
, which represents an organizational unit in the directory
, which represents an organization in the directory
, which represents a locality in the directory
, which represents a state in the directory
, which represents a country in the directory
) to build a DN for searching the directory. When creating a mapper rule, you
parameter; for details, see Table 5-3 on page 261.
, , , , ,
CN OU O L ST