Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual page 255

begin a subtree search and the filter components to form a search filter for the
subtree. If none of the DN components are configured, the server uses the base DN
for the subtree. If the base DN is null and none of the DN components match, an
error is returned. If none of the DN components and filter components match, an
error is returned. If the filter components are null, a base search is performed.
Note that both
DNComps
components or attributes separated by commas. The parameters don't accept
multiple entries of an attribute; for example, you can set
but not to
CN,OU2,OU1
example, if your directory entries contain multiple
multiple s in your
OU
code for the
LdapDNCompsMap
directory:
<server_root>/cms_sdk/cms_jdk/samples/mappers
The discussion below explains how mapping by DN components works. It is
recommended that you read this before configuring a Certificate Manager to use
this mapper.
Subject names in certificates are in distinguished-name format. A distinguished name
(DN) uniquely identifies an entry in an LDAP directory. The DN consists of
components that help identify the entry; for details, see Appendix , "Distinguished
Names."
The following components are commonly used in DNs:
• , which represents the user ID of a user in the directory
UID
• , which represents the common name of a user in the directory
CN
• , which represents an organizational unit in the directory
OU
• , which represents an organization in the directory
O
• , which represents a locality in the directory
L
• , which represents a state in the directory
ST
• , which represents a country in the directory
C
For example, the following DN represents the user named Jane Doe who works for
the Sales department at Example Corporation, which is located in Mountain View
in the state of California, United States:
CN=Jane Doe, E=jdoe@example.com, OU=Sales, O=Example Corporation,
L=Mountain View, ST=California, C=US
and
filterComps
. If there's a need for you to support such a filter, for
for filtering entries, you can modify the source
filterComps
module. The java class for the module is in this
LdapDNCompsMap Plug-in Module
parameters accept valid DN
filterComps
s and you want to use
OU
Chapter 5 Mapper Plug-in Modules
to ,
CN,OU
255