Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual page 794

Setting up CEP Enrollment Manually
Table 25-1 CEP service-related configuration parameters in the configuration file (Continued)
Parameter Description
Specifies the type of object to assign to the new entry. By default, this is cep, and should
entryObject
not be changed. Note that when createEntry=true, the Certificate Manager will
Class
attempt to create an entry for the user. The directory hierarchy must be set up correctly
beforehand to accept new entries. To clarify this by an example, if you expect the
Certificate Manager to be able to create an entry for a certificate with DN CN=John
Doe, OU=Accounting, O=Company, C=US, you must have already created three (3)
directory entries for
C=US
O=Company, C=US
OU=Accounting, O=Company, C=US
You can do this with the help of the ldapmodify command and an LDIF file with the
following information:
dn: C=US
changetype: add
objectclass: top
objectclass: country
c: US
dn: O=Company, C=US
changetype: add
objectclass: top
objectclass: organization
o: Company
dn: OU=Accounting, O=Company, C=US
changetype: add
objectclass: top
objectclass: organizationalunit
ou: Accounting
dn: cn=config,cn=ldbm
changetype: modify
add: nsslapd-suffix
nsslapd-suffix: C=US
Also, note that in this case, C=US is the root of your directory, because it is the sole
component of the DN. To create a new root, you must first add a new suffix, which is
done by adding this to your LDIF file (see the last section of the LDIF file above). For
more details, check the Netscape Directory Server documentation.
Once this is done, you may configure the Certificate Manager for automated
enrollment. To do so, follow the steps in the next section. If you do not want to
configure the server for automated enrollment, restart the server.
794 Netscape Certificate Management System Installation and Setup Guide • May 2002