Netscape MANAGEMENT SYSTEM 6.01 - PLUG-IN Manual page 34

UidPwdPinDirAuth Plug-in Module
Description of parameters defined in the UidPwdPinDirAuth module (Continued)
Table 1-3
Parameter
ldap.ldapauth.
clientCertNickname
ldap.ldapauth.
authtype
ldap.basedn
ldap.minConns
34 Netscape Certificate Management System Plug-Ins Guide • May 2002
Description
Specifies the nickname or the friendly name of the certificate to be used for
SSL client authentication to the authentication directory in order to remove
PINs. Make sure that the certificate is valid and has been signed by a CA that
is trusted in the authentication directory's certificate database, and that the
authentication directory's certmap.conf file has been configured to
correctly map the certificate to a DN in the directory. (This is needed for PIN
removal only.)
Permissible values: Enter the name of a currently valid CMS certificate, for
example, its SSL server certificate.
Example: Server-Cert
Specifies the authentication type—basic authentication or SSL client
authentication—required in order to remove PINs from the authentication
directory.
Permissible values: BasicAuth or SslClientAuth.
• BasicAuth specifies basic authentication. If you choose this option, be
sure to enter the correct values for ldap.ldapauth.bindDN and
password parameters; the server uses the DN from the
ldap.ldapauth.bindDN attribute to bind to the directory (default).
• SslClientAuth specifies SSL client authentication. If you choose this
option, be sure to set the value of the ldap.ldapconn.secureConn
parameter to true and the value of the
ldap.ldapauth.clientCertNickname parameter to the nickname of
the certificate to be used for SSL client authentication.
Example: BasicAuth
Specifies the base DN for searching the authentication directory—the server
uses the value of the uid field from the HTTP input (what a user enters in the
enrollment from) and the base DN to construct an LDAP search filter.
Permissible values: Any valid DN string of up to 255 characters.
Example: O=example.com
Specifies the minimum number of connections permitted to the authentication
directory.
Permissible values: 1 to 3.
Example: 3