Table of Contents
Advertisement
If you enable the policy and configure it correctly, it first searches for the user
under the base specified in the l
(
uid=HTTP_PARAMS.UID
•
If the
parameter is empty, the policy checks the
value
If the attribute named in the
request, the policy accepts the request.
If the attribute named in the
request, the policy rejects the request.
•
If the
parameter is not empty, the policy checks its value with the value
value
of the attribute specified in the
If the attribute named in the
the policy accepts the request.
If the attribute named in the
specified value, the policy rejects the request.
In the case of multi-valued attributes, the request will be accepted if any of the
values matches the specified value; comparisons are case sensitive.
Unlike some of the other policy modules, Certificate Management System does not
create an instance of the attribute present constraints policy during installation. If
you want to create an instance of the
section "Step 4. Add New Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Configuration Parameters of
AttributePresentConstraints
In the CMS configuration file, the
identified as
<subsystem>.Policy.impl.AttributePresentConstraints.
class=com.netscape.certsrv.policy.AttributePresentConstraints
is
or
<subsystem>
ca
In the CMS window, the module is identified as
Figure 3-2 shows how configurable parameters for the module are displayed in the
CMS window.
dap.ldapconn.basedn
) for the user's entry.
attribute
attribute
attribute
attribute
attribute
AttributePresentConstraints
AttributePresentConstraints
(prefix identifying the subsystem).
ra
AttributePresentConstraints Plug-in Module
parameter with the filter
attribute
parameter is present in the
parameter is not present in the
parameter.
parameter has the specified value,
parameter does not have the
AttributePresentConstraints
Chapter 3
Constraints Policy Plug-in Modules
parameter:
module, see
module is
, where
.
89
Advertisement
Table of Contents
