Netscape MANAGEMENT SYSTEM 6.0 - PLUG-IN Manual page 89

Description of parameters defined in the AttributePresentConstraints module (Continued)
Table 3-2
Parameter Description
Specifies the predicate expression for this rule. If you want the rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see section "Using Predicates in Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Example: HTTP_PARAMS.certType==client
Specifies the host name of the LDAP directory to connect to.
ldap.ldapconn.
host
Permissible values: The name must be fully-qualified host name in the
<machine_name>.<your_domain>.<domain> form.
Example: corpDirectory.example.com
Specifies the TCP/IP port at which the LDAP directory listens to requests from
ldap.ldapconn.
Certificate Management System.
port
Permissible values: Any valid port number. The default is 389; use 636 if the directory
is configured for SSL-enabled communication.
Example: 389
Specifies the type—SSL or non-SSL—of the port at which the LDAP directory listens
ldap.ldapconn.
to requests from Certificate Management System.
secureConn
• Check the box if the port is an SSL (HTTPS) port. If your directory is configured
• Leave the box unchecked if the port is a non-SSL (HTTP) port. If your directory is
Specifies the LDAP protocol version.
ldap.ldapconn.
version
Permissible values: 2 or 3.
• 2 specifies LDAP version 2. If your directory is based on Netscape Directory
• 3 specifies LDAP version 3. For Directory Server versions 3.x and later, choose 3
Example: 3
Specifies the user entry to bind as for checking the attribute in the LDAP directory.
ldap.ldapauth.
bindDN
Permissible values: A valid bind DN.
Example: CN=pinmanager
password Specifies the password associated with the DN specified by the
ldap.ldapauthbindDN parameter.
for SSL-enabled communication (with or without SSL client authentication),
choose this option.
configured for basic authentication, choose this option (default).
Server 1.x, choose 2.
(default).
AttributePresentConstraints Plug-in Module
Chapter 3 Constraints Policy Plug-in Modules 89