Table of Contents
Advertisement
SubjectDirectoryAttributesExt Plug-in Module
The subject directory attributes extension policy in Certificate Management System
allows you to include up to three directory attributes in the extension. For each
attribute that you want to include in the extension, you need to specify the attribute
name and its value—the name must be the X.500 directory attribute name itself and
the attribute value can be derived from the request or directly entered in the policy
configuration as a string value.
The list of directory attributes supported by default are shown as permissible
parameter explained in Table 4-27
values for the
attribute<n>.attributeName
on page 240. You can extend the list of attributes supported by the policy by
defining new X.500 directory attributes. For details on defining new attributes, see
"Extending Attribute Support" on page 314.
Note that, during installation, Certificate Management System does not create an
instance of the subject directory attributes extension policy. If you want the server
to add this extension to certificates, you must create an instance of the
module and configure it. For instructions, see
SubjectDirectoryAttributesExt
section "Step 4. Add New Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Configuration Parameters of
SubjectDirectoryAttributesExt
In the CMS configuration file, the
module is
SubjectDirectoryAttributesExt
identified as
<subsystem>.Policy.impl.SubjectDirectoryAttributesExt.
, where
class=com.netscape.cms.policy.SubjectDirectoryAttributesExt
is
or
(prefix identifying the subsystem).
<subsystem>
ca
ra
In the CMS window, the module is identified as
. Figure 4-28 shows how the configurable
SubjectDirectoryAttributesExt
parameters for the module are displayed in the CMS window.
Chapter 4
Certificate Extension Plug-in Modules
239
Advertisement
Table of Contents
