Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 392

Automated Enrollment
In the absence of an LDAP directory, subject names of all certificates issued by the
server will be of the form
First Name
directory, and
default subject-name form isn't adequate, the module supports a parameter named
extendedDN
use for extending the default subject DN pattern.
To set up NIS based authentication you do the following:
• Set any policies for certificate extensions, or for constraints on certificates, see
Chapter 11, "Policies" for information about policies. Alternatively, you can
enroll users through the certificate profile functionality setting policies for
specific certificates in the certificate profile, see Chapter 10, "Certificate
Profiles" for information about policies.
• Create an instance of the
configure the instance. See "Setting Up the NISAuth Authentication," on page
392 for details.
• Customize the HTML enrollment forms. Make sure the proper authentication
method is contained in the form, and do any other customization required.
In the enrollment form you use, be sure to include the following line, and
replace
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CMS
Customization Guide.
• In the case of certificate profile-based enrollments, customize the enrollment
forms by configuring the inputs in the certificate profile. Make sure you
include the information that will be needed by the plug-in to authenticate the
user. If the default inputs do not contain all of the information that needs to be
collected, you can either create an input that does using the CMS SDK, or
submit a request created with a third-party tool.
Setting Up the NISAuth Authentication
To setup this method of authentication:
In the CMS window of the Certificate Manager or Registration Manager that
1.
processes certificate requests, select the Configuration tab.
Select Authentication in the navigation tree.
2.
392 Netscape Certificate Management System Administrator's Guide • February 2003
CN=<FirstName LastName>,UID=<UserID>
and is a user's first and last names as specified in the NIS
Last Name
is the user's NIS ID. To accommodate scenarios where the
UserID
. This parameter enables you to specify a suffix that the server should
NISAuth
with the name of the authentication instance you added.
myAuthMgr
Authentication plug-in module and
, where