Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 559

Table 11-39 SubjectAltNameExt Configuration Parameters (Continued)
Parameter
numGeneralNames
generalName<n>.
requestAttr
generalName<n>.
generalNameChoice
Description
Specifies the total number of alternative names or identities permitted in the
extension. Note that each name has a set of configuration
parameters—generalName<n>.requestAttr and
generalName<n>.generalNameChoice—and you must specify appropriate
values for each of those parameters; otherwise the policy rule will return an
error.
You can change the total number of identities by changing the value of this
parameter; there's no restriction on the total number of identities you can
include in the extension. Each set of configuration parameters is distinguished
by <n>, which is an integer derived from the value you assign in this field. For
example, if you set the numGeneralNames parameter to 2, <n> would be 0 and
1.
• 0 specifies that no identities can be contained in the extension.
• n specifies the total number of identities to be included in the extension; it
must be an integer greater than zero. The default value is 8.
Specifies the request attribute whose value is to be included in the extension. The
attribute value must conform to any of the supported general-name types
(specified by the generalName<n>.generalNameChoice parameter). If the
server finds the attribute in the request, it sets the attribute value in the extension
and then adds the extension to certificates specified by the predicate
parameter. If you specify multiple attributes and if none of the attributes are
present in the request, the server does not add the subject alternative name
extension to certificates.
Permissible values: A request attribute included in the certificate request.
Example: AUTH_TOKEN.mail
Specifies the general-name type for the request attribute.
Permissible values: rfc822Name, directoryName, dNSName,
ediPartyName, URL, iPAddress, OID, or otherName.
• Select rfc822Name if the request-attribute value is an Internet mail address
in the local-part@domain format (default). For example,
jdoe@example.com.
• Select directoryName if the request-attribute value is an X.500 directory
name, similar to the subject name in a certificate. For example,
CN=Jane Doe, OU=Sales Dept, O=Example Corporation, C=US.
Extension-Specific Policy Module Reference
Chapter 11 Policies 559