Table of Contents
Advertisement
Figure 5-5
LdapSimpleMap Plug-in Module
The
LdapSimpleMap
enables you to configure a Certificate Manager to map a certificate to an LDAP
directory entry by formulating the entry's DN from components specified in the
certificate request, certificate's subject name, certificate extension, and attribute
variable assertion (AVA) constants. For more information on AVAs, see the
directory documentation.
The simple mapper requires you to specify just one parameter, which is named
dnPattern
An AVA can be a variable, such as
O=Example Corporation
form the DN pattern.
Example 1:
Example 2:
Example 3: uid=
E=$ext.SubjectAlternativeName.RFC822Name,ou=$subj.ou
In the above examples,
$subj
take the attribute from the certificate extension.
The LdapDNExactMap module
plug-in module implements the simple mapper. This mapper
. The value of
dnPattern
. The examples below illustrate how you can use AVAs to
uid=CertMgr, o=Example Corporation
CN=$subj.cn,OU=$subj.ou,O=$subj.o,C=US
$req.HTTP_PARAMS.uid,
$req
means take the attribute from the certificate subject name, and
can be a list of AVAs separated by commas.
UID=$subj.UID
means take the attribute from the certificate request,
LdapSimpleMap Plug-in Module
, , or a constant, such as
$ext
Chapter 5
Mapper Plug-in Modules
means
261
Advertisement
Table of Contents
