Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual page 818

Setting up CEP Enrollment Manually
in the authentication-token file before it does any checking of the password, you
must identify attributes that are unique in each router request. You do this by
setting the
implementation to the list of attributes which will be unique in the CEP request.
Table 25-3 lists the default attributes set by the router in the request.
Table 25-3 Default request attributes set by the router
Attribute
UNSTRUCTUREDNAME
UNSTRUCTUREDADDRESS
SERIALNUMBER
You can identify one or more of these attributes as unique attributes in the
authentication-token file. For most cases, specifying the
unique attribute will suffice. In this case, you would set the
parameter as follows:
auths.instance.flatfile.keyAttributes=UNSTRUCTUREDNAME
However, if this is not unique, you may specify both
UNSTRUCTUREDADDRESS
keyAttributes
auths.instance.flatfile.keyAttributes=UNSTRUCTUREDNAME,UNSTRUCTURED
ADDRESS
This will force the server to use both these attributes to locate an entry in the
authentication-token file. Note that both the attributes must be present in the
request for authentication to succeed.
818 Netscape Certificate Management System Installation and Setup Guide • October 2001
parameter of the
keyAttributes
Description
Specifies the DNS name of the router (for example, router32.siroe.com).
This is always specified in the request.
Specifies the IP address of the router (for example, 101.22.33.124). This
may not be in the request—a user may not want to include this in the subject
name of the router certificate, and hence choose not to specify one during
enrollment.
Specifies the serial number of the router (for example, 239333). This can
sometimes be found on a label on the back of the router. It is also available by
typing the show version command. This may not be in the request—a user
may not want to include this in the subject name of the router certificate, and
hence choose not to specify one during enrollment.
as unique attributes. In this case, you would set the
parameter as follows:
plug-in
FlatFileAuth
UNSTRUCTUREDNAME
keyAttributes
UNSTRUCTUREDNAME
as the
and