Step C. Prepare The Input File; Step D. Run The Command Without The Write Option - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

The tool modifies the schema with a new attribute (by default,
object class (by default,
ACI to allow only the
If the tool is able to update the directory with all the changes, you should see a
status-update message, similar to the sample shown below:
Adding attribute: ( pin-oid NAME 'pin' DESC 'User Defined
Attribute' SYNTAX '1.3.6.1.4.1.1466.115.121.1.5' SINGLE-VALUE )
.. successful
Adding objectclass: ( pinPerson-oid NAME 'pinPerson' DESC 'User
Defined ObjectClass' SUP 'top' MUST ( objectclass ) MAY ( aci $
pin )
.. successful
Adding user: cn=pinmanager,o=example.com
.. successful
modifying ACI for: ou=people,o=example.com
.. successful

Step C. Prepare the Input File

This step is optional.
If you want to generate PINs for specific user entries or want to provide your own
PINs, use an input file (to provide the tool with such information). For information
on constructing an input file, check the PIN Generator documentation.

Step D. Run the Command Without the Write Option

Run the command without the
setpin
option and bind to the directory as the PIN manager user.
The tool will write PINs to the specified output file; no changes are made to the
directory yet. This will give you the opportunity to check the PINs (by looking at
the output file) before updating the directory.
To run the command:
Open a terminal window.
1.
Go to this directory:
2.
Run the command with the appropriate arguments; be sure to point the
3.
setpin
option to the file you've created (and not to the
optfile
), creates a
pinPerson
user to modify the
pinmanager
write
<server_root>/bin/cert/tools
Chapter 15
Configuring Authentication for End-User Enrollment
user, and sets the
pinmanager
attribute.
pin
option. Be sure to include the
setpin.conf
Setting Up End-User Authentication
) and a new
pin
output
file).
505