Table of Contents
Advertisement
Overview of Mapper Modules
Overview of Mapper Modules
If you configure a Certificate Manager to publish to a directory, whenever the
server issues a certificate or updates a certificate or CRL, it needs to locate the entry
in the directory in order to update it. For example, to find the correct directory
entry to update, the Certificate Manager needs to present Directory Server with
search criteria (so that it can initiate an LDAP search operation); the Certificate
Manager considers the search successful only if Directory Server returns a single
LDAP entry that exactly matches the search criteria.
The Certificate Manager uses object-mapping rules to find the directory entry that
needs to be updated. When configuring a Certificate Manager for publishing
certificates and CRLs, you define mapping rules that help the server to construct
appropriate search criteria that find the entry that needs to be updated.
Mapper modules help you configure the Certificate Manager to use specific rules to
map or locate a specific entry, such as a CA's entry or an end-entity's entry, in a
specified directory; once the correct entry is located, the server publishes the
certificate or CRL to the correct attribute in the entry using a publisher rule, as
explained in Chapter 6, "Publisher Plug-in Modules".
By default, the Certificate Manager provides a set of mapper plug-in modules for
mapping the CA certificate, end-entity certificates, and CRLs to the appropriate
entries in an LDAP directory; because it's not required to map entries in a flat file
and online validation authority, no mapper modules are provided for mapping
objects in a flat file or an online validation authority.
Plug-in modules are implemented as Java classes and are registered in the CMS
publishing framework. The Mapper Plugin Registration tab of the CMS window
(Figure 5-1) lists all the modules and the corresponding classes that are registered
by default with a Certificate Manager.
Note that the name of the Java class for a mapper plug-in module is in this format:
com.netscape.cms.publish.<plugin_name>
where
for the
com.netscape.cms.publish.LdapCaSimpleMap
248
Netscape Certificate Management System Plug-Ins Guide • May 2002
is the name of a plug-in module. For example, the Java class
<plugin_name>
module would be:
LdapCaSimpleMap
Advertisement
Table of Contents
