Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 399

Note that the portal authentication module by default uses the standard LDAP
object class named
inetOrgPerson
fields defined in the default portal enrollment form correspond to the attributes
defined in this object class as defined in Netscape Directory Server 4.x. The module
is capable of reading and writing these attributes only. However, you can
customize the module to accommodate all the fields supported by popular portals
by extending the directory schema to include a new object class; you'll also be
required to update the enrollment form to include attributes corresponding to the
new object class.
To set up portal enrollment you do the following:
• Set any policies for certificate extensions, or for constraints on certificates, see
Chapter 11, "Policies" for information about policies. Alternatively, you can
enroll users through the certificate profile functionality setting policies for
specific certificates in the certificate profile, see Chapter 10, "Certificate
Profiles" for information about policies.
• Create an instance of the
configure the instance. See "Setting Up the PortalEnroll Authentication," on
page 399 for details.
• Customize the HTML enrollment forms. Make sure the proper authentication
method is contained in the form, and do any other customization required.
In the enrollment form you use, be sure to include the following line, and
replace
myAuthMgr
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CMS
Customization Guide.
• In the case of certificate profile-based enrollments, customize the enrollment
forms by configuring the inputs in the certificate profile. Make sure you
include the information that will be needed by the plug-in to authenticate the
user. If the default inputs do not contain all of the information that needs to be
collected, you can either create an input that does using the CMS SDK, or
submit a request created with a third-party tool.
Setting Up the PortalEnroll Authentication
To setup this method of authentication:
In the CMS window of the Certificate Manager or Registration Manager that
1.
processes certificate requests, select the Configuration tab.
Select Authentication in the navigation tree.
2.
to create and update user entries. The input
PortalEnroll
with the name of the authentication instance you added.
Authentication plug-in module and
Chapter 9
Automated Enrollment
Authentication 399