The Setpin Command; Command-Line Syntax - Netscape MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Manual

The setpin Command

The setpin Command
You run the PIN Generator by entering the
a command shell and monitoring the output in the shell window. This section gives
the syntax for the
generating PINs and storing them in your authentication directory, see section
"Setting Up Pin Based Enrollment" in Chapter 9 "Authentication" of CMS
Administrator's Guide.

Command-Line Syntax

To set up directory for pin usage, modify setpin.conf, then run:
./setpin optfile=/bin/cert/tools/setpin.conf
Usage:
Table 5-1
host
port
binddn
bindpw
filter
basedn
length
minlength
maxlength
gen
case
objectclass
attribute
hash
saltattribute
input
44 Netscape Certificate Management System Command-Line Tools Guide • June 2003
command and its arguments. For instructions on
setpin
./setpin option=value ... option=value
LDAP host
LDAP port (default 389)
DN to bind to directory as
Password associated with above DN
Ldap search filter e.g. filter=(uid=*) [required]
Base DN used for LDAP search
Length of generated pins (default 6)
Minimum length of generated pins (not to be used with 'length')
Maximum length of generated pins (not to be used with 'length')
Permitted chars for pin. Type 'setpin gen' for more info
Restrict case of pins 'case=upperonly'
Objectclass of LDAP entry to operate on (default pinPerson)
Which LDAP attribute to write to
Hash algorithm used to store pin: 'none', 'md5' or 'sha1' (default)
Which attribute to use for salt
File to use for restricting DN's, or providing your own pins
command and its arguments in
setpin
[required]
[required]
(default pin)
(default: dn)