Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 399

ldap.ldapconn.secureConn. Specifies the type—SSL or non-SSL—of the port
on which the authentication directory listens to requests from CMS. Select if
this is an SSL port, deselect if this is a non-SSL port.
ldap.ldapconn.version. Specifies the LDAP protocol version.
version 2. If your authentication directory is based on Netscape Directory
Server 1.x, choose .
2 3
3.x and later, choose
ldap.ldapauth.bindDN. Specifies the user entry to bind as when removing
PINs from the authentication directory. You need to specify this parameter
only if you've selected
separate user entry that has permission to modify only the PIN attribute in the
directory. For example, don't use the directory manager's entry as it has
privileges to modify the entire directory content.
password. Specifies the password associated with the DN specified by the
ldap.ldapauthbindDN
stores the password in the single sign-on password cache and uses it for
subsequent start ups.You need to specify this parameter only if you've selected
.
removePin
ldap.ldapauth.clientCertNickname. Specifies the nickname of the certificate to
be used for SSL client authentication to the authentication directory in order to
remove PINs. Make sure that the certificate is valid and has been signed by a
CA that is trusted in the authentication directory's certificate database, and
that the authentication directory's
correctly map the certificate to a DN in the directory. (This is needed for PIN
removal only.)
ldap.ldapauth.authtype. Specifies the authentication type—basic
authentication or SSL client authentication—required in order to remove PINs
from the authentication directory.
specifies basic authentication. If you choose this option, be
BasicAuth
sure to enter the correct values for
parameters; the server uses the DN from the
attribute to bind to the directory (default).
SslClientAuth
option, be sure to set the value of the
parameter to
true
ldap.ldapauth.clientCertNickname
certificate to be used for SSL client authentication.
specifies LDAP version 3. For Directory Server versions
(default).
3
. It is recommended that you create and use a
removePin
parameter. when you save your changes, the server
certmap.conf
ldap.ldapauth.bindDN
specifies SSL client authentication. If you choose this
ldap.ldapconn.secureConn
and the value of the
Automated Enrollment
specifies LDAP
2
file has been configured to
and
ldap.ldapauth.bindDN
parameter to the nickname of the
Chapter 9 Authentication
password
399