Table of Contents
Advertisement
LdapCaSimpleMap Plug-in Module
Default mapper plug-in modules for mapping certificates and CRLs (Continued)
Table 5-1
Plug-in module name
LdapSubjAttrMap
After you take a look at the default mapper modules, if you determine that they do
not meet your requirements entirely, you can develop a custom mapper module by
implementing the following Java interface:
com.netscape.cms.ldappublish.ILdapMapper
For more information about this interface, check the CMS software development
kit (SDK) installed at this location:
<server_root>/cms_sdk/cms_jdk
Be sure to take a look at the samples available at this location:
<server_root>/cms_sdk/cms_jdk/samples/mappers
For instructions on how to configure a Certificate Manager to use a mapper
module, see section "Configuring a Certificate Manager to Publish Certificates and
CRLs" in Chapter 19, "Setting Up LDAP Publishing" of CMS Installation and Setup
Guide.
LdapCaSimpleMap Plug-in Module
The
LdapCaSimpleMap
mapper enables you to configure a Certificate Manager to automatically create an
entry for the CA in an LDAP directory and then map the CA's certificate to the
directory entry by formulating the entry's DN from components specified in the
certificate request, certificate subject name, certificate extension, and attribute
variable assertion (AVA) constants. For more information on AVAs, check the
directory documentation.
The CA certificate mapper allows you to specify whether to create an entry for the
CA or to just map the certificate to an existing entry, or to do both. For example,
you can choose to manually create an entry for the CA in the directory and then
configure the CA certificate mapper to just locate the entry by using attributes from
the issuer name in the CA's signing certificate and AVA constants.
250
Netscape Certificate Management System Plug-Ins Guide • March 2002
Function
Maps a certificate to a directory entry by searching for the entry that contains the
LDAP attribute named certSubjNameAttr whose value exactly matches the
certificate subject name. For details, see "LdapSubjAttrMap Plug-in Module" on
page 263.
plug-in module implements the CA certificate mapper. This
Advertisement
Table of Contents
