Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual page 48

PortalEnroll Plug-in Module
Description of parameters defined in the PortalEnroll module (Continued)
Table 1-5
Parameter
ldap.ldapconn.
secureConn
ldap.ldapconn.
version
ldap.ldapauth.
bindDN
password
ldap.ldapauth.
clientCertNickname
48 Netscape Certificate Management System Plug-Ins Guide • March 2002
Description
Specifies the type—SSL or non-SSL—of the port at which the portal directory
listens to requests from Certificate Management System.
• Check the box if the port is an SSL (HTTPS) port. If your portal directory is
configured for SSL-enabled communication (with or without SSL client
authentication), choose this option.
• Leave the box unchecked if the port is a non-SSL (HTTP) port. If your
portal directory is configured for basic authentication, choose this option
(default).
Specifies the LDAP protocol version.
Permissible values: 2 or 3.
• 2 specifies LDAP version 2. If your portal directory is based on Netscape
Directory Server 1.x, choose 2.
• 3 specifies LDAP version 3. For Directory Server versions 3.x and later,
choose 3 (default).
Example: 3
Specifies the user account to bind as in order to create and update user entries
in the portal directory. It is recommended that you create and use a separate
user account that has permission to create user entries and modify user
attributes in the directory. For example, don't use the directory manager's
entry as it has privileges to modify the entire directory content.
Permissible values: A valid bind DN.
Example: CN=Portal Registration Manager
Specifies the password associated with the DN specified by the
ldap.ldapauthbindDN parameter.
Permissible values: As applicable.
Specifies the nickname or the friendly name of the certificate to be used for
SSL client authentication to the portal directory. Make sure that the certificate
is valid and has been signed by a CA that is trusted in the portal directory's
certificate database, and that the portal directory's certmap.conf file has
been configured to correctly map the certificate to a DN in the directory.
Permissible values: Enter the name of a currently valid CMS certificate, for
example, its SSL server certificate.
Example: Server-Cert