Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 202

NameConstraintsExt Plug-in Module
Table 4-16 Description of parameters defined in the NameConstraintsExt module (Continued)
Parameter
numExcludedSubtrees
permittedSubtrees<n>.
base.generalNameChoice
202 Netscape Certificate Management System Plug-Ins Guide • May 2002
Description
Specifies the total number of subtrees to be excluded in the extension. Note
that each excluded subtree has a set of configuration parameters and you
must specify appropriate values for each of these parameters; otherwise
the policy rule will return an error.
You can change the total number of excluded subtrees by changing the
value in this field; there's no restriction on the total number of excluded
subtrees you can include in the extension. Each set of configuration
parameters is distinguished by <n>, which is an integer derived from the
value you assign in this field. For example, if you set the
numExcludedSubtrees parameter to 2, <n> would be 0 and 1.
Permissible values: 0 or n.
• 0 specifies that no excluded subtrees can be contained in the extension.
• n specifies the total number of excluded subtrees to be included in the
extension; it must be an integer greater than zero. The default value is
8.
Example: 2
Specifies the general-name type for the permitted subtree you want to
include in the extension.
Permissible values: rfc822Name, directoryName, dNSName,
ediPartyName, URI, iPAddress, registeredID, or otherName.
• Select rfc822Name if the subtree is an Internet mail address (default).
• Select directoryName if the subtree is an X.500 directory name.
• Select dNSName if the subtree is a DNS name.
• Select ediPartyName if the subtree is a EDI party name.
• Select URL if the subtree is a uniform resource locator.
• Select iPAddress if the subtree is an IP address.
• Select OID if the subtree is an object identifier.
• Select otherName if the subtree is in any other name form.
Example: directoryName