Table of Contents
Advertisement
LdapSubjAttrMap Plug-in Module
LdapSubjAttrMap Plug-in Module
The
LdapSubjAttrMap
This mapper enables you to configure a Certificate Manager to map a certificate to
an LDAP directory entry by using the LDAP attribute named
Note that for you to be able to use this mapper, your directory entries must include
the
certSubjectDN
This mapper requires you to specify the exact pattern of the subject DN because the
Certificate Manager searches the directory for the
value exactly matches the entire subject DN specified in the mapper configuration.
For example, assume the certificate subject name is this:
UID=jdoe, O=Siroe Corporation, C=US
When searching the directory for the entry, the Certificate Manager first searches
for entries that have these attributes in common
certSubjectDN=UID=jdoe, O=Siroe Corporation, C=US
and then narrows down the search to an entry that has only this:
certSubjectDN=UID=jdoe, O=Siroe Corporation, C=US
If no matching entries are found, the server returns an error and writes it to the log;
see section "Monitoring CMS Logs" in Chapter 23, "Managing CMS Logs" of CMS
Installation and Setup Guide.
Configuration Parameters of LdapSubjAttrMap
In the configuration file, the
ca.publish.mapper.impl.LdapSubjAttrMap.class=com.netscape.
certsrv.ldap.LdapCertSubjMap
In the CMS window, the module is identified as
shows how configurable parameters for the module are displayed in the CMS
window.
266
Netscape Certificate Management System Plug-ins Guide • October 2001
plug-in module implements the subject attribute mapper.
attribute.
LdapSubjAttrMap
.
certSubjectDN
attribute whose
certSubjectDN
module is identified as
. Figure 5-7
LdapSubjAttrMap
.
Advertisement
Table of Contents
