Table of Contents
Advertisement
UidPwdPinDirAuth Plug-in Module
Description of parameters defined in the UidPwdDirAuth module (Continued)
Table 1-2
Parameter
ldap.ldapconn.
version
ldap.basedn
ldap.minConns
ldap.maxConns
UidPwdPinDirAuth Plug-in Module
The
UidPwdPinDirAuth
authentication method. You can use this module for authenticating users in the
global LDAP domain during certificate enrollment. This authentication method is
functionally very similar to the directory-based authentication explained in
"UidPwdDirAuth Plug-in Module" on page 24, except that for stronger
authentication you combine a PIN or one-time password with the end users' user
IDs and passwords.
30
Netscape Certificate Management System Plug-ins Guide • October 2001
Description
Specifies the LDAP protocol version.
Permissible values: 2 or 3.
• 2 specifies LDAP version 2. If your authentication directory is based on
Netscape Directory Server 1.x, choose 2.
• 3 specifies LDAP version 3. For Directory Server versions 3.x and later,
choose 3.
Example: 3
Specifies the base DN for searching the authentication directory—the server
uses the value of the uid field from the HTTP input (what a user enters in the
enrollment form) and the base DN to construct an LDAP search filter.
Permissible values: Any valid DN string of up to 255 characters.
Example: O=siroe.com
Specifies the minimum number of connections permitted to the authentication
directory.
Permissible values: 1 to 3.
Example: 2
Specifies the maximum number of connections permitted to the
authentication directory.
Permissible values: 3 to 10.
Example: 8
plug-in module implements the directory- and PIN-based
Advertisement
Table of Contents
