Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 394

Automated Enrollment
ldapByteAttributes. Specifies the list of LDAP byte (binary) attributes that
should be considered authentic for the end entity. If specified, the values
corresponding to these attributes will be copied from the authentication
directory into the authentication token for use by other modules—that is,
values retrieved from this parameter can be used by policy modules to make
certain policy decisions or to add additional information to users' certificates.
For example, assume you have defined an LDAP binary attribute for storing
users' pictures or fingerprints in your directory. You could develop a policy
plug-in that adds users' pictures to their certificates as extensions.
Entering values for this parameter is optional.
ldap.ldapconn.host. Specifies the fully-qualified DNS host name of the
authentication LDAP directory.
ldap.ldapconn.port. Specifies the TCP/IP port on which the authentication
LDAP directory listens to requests from CMS.
ldap.ldapconn.secureConn. Specifies the type—SSL or non-SSL—of the port
on which the authentication directory listens to requests from CMS. Select if
this is an SSL port, deselect if this is a non-SSL port.
ldap.ldapconn.version. Specifies the LDAP protocol version.
version 2. If your authentication directory is based on Netscape Directory
Server 1.x, choose
3.x and later, choose
ldap.basedn. Specifies the base DN for searching the authentication
directory—the server uses the value of the
(what a user enters in the enrollment from) and the base DN to construct an
LDAP search filter.
ldap.minConns. Specifies the minimum number of connections permitted to
the authentication directory. Permissible values:
ldap.maxConns. Specifies the maximum number of connections permitted to
the authentication directory. Permissible values:
Click OK. The authentication instance is now set up and enabled.
7.
394 Netscape Certificate Management System Administrator's Guide • February 2003
. specifies LDAP version 3. For Directory Server versions
2 3
(default).
3
specifies LDAP
2
field from the HTTP input
uid
to .
1 3
to .
3 10