Table of Contents
Advertisement
LdapSimpleMap Plug-in Module
Example 1:
Example 2:
Example 3: uid=
E=$ext.SubjectAlternativeName.RFC822Name,ou=$subj.ou
In the above examples,
$subj
take the attribute from the certificate extension.
By default, the Certificate Manager uses mapper rules that are based on the simple
mapper. During installation, the Certificate Manager automatically creates an
instance (called a mapper) of the simple mapper module. The mapper is named
LdapUserCertMap
map various types of end-entity certificates the server will issue to their
corresponding directory entries. For details, see "LdapUserCertMap Mapper" on
page 265.
It is important that you review and customize this mapper. For instructions on
modifying mappers or creating new mappers, section "Configuring a Certificate
Manager to Publish Certificates and CRLs" in Chapter 19, "Setting Up LDAP
Publishing" of CMS Installation and Setup Guide.
Configuration Parameters of LdapSimpleMap
In the CMS configuration file, the
ca.publish.mapper.impl.LdapSimpleMap.class=com.netscape.certsrv.
ldap.LdapSimpleMap
In the CMS window, the module is identified as
how configurable parameters for the module are displayed in the CMS window.
264
Netscape Certificate Management System Plug-ins Guide • October 2001
uid=CertMgr, o=Siroe Corporation
CN=$subj.cn,OU=$subj.ou,O=$subj.o,C=US
$req.HTTP_PARAMS.uid,
$req
means take the attribute from the certificate subject name, and
(see Figure 5-2 on page 254). You can use the default mapper to
.
means take the attribute from the certificate request,
LdapSimpleMap
LdapSimpleMap
$ext
module is identified as
. Figure 5-6 shows
means
Advertisement
Table of Contents
