Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 494

Constraints-Specific Policy Module Reference
• If the
of the attribute specified in the
In the case of multi-valued attributes, the request will be accepted if any of the
values matches the specified value; comparisons are case sensitive.
Unlike some of the other policy modules, CMS does not create an instance of the
attribute present constraints policy during installation.
Table 11-3 describes the configuration parameters of the
AttributePresentConstraints
Table 11-3 AttributePresentConstraints Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable (default), deselect to
enable
disable.
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see "Using Predicates in Policy Rules" on page 483.
Specifies the host name of the LDAP directory to connect to.
ldap.ldapconn.
host
Permissible values: The name must be fully-qualified host name in the
<machine_name>.<your_domain>.<domain> form.
Example: corpDirectory.example.com
Specifies the TCP/IP port at which the LDAP directory listens to requests from
ldap.ldapconn.
port
Permissible values: Any valid port number. The default is 389; use 636 if the directory
is configured for SSL-enabled communication.
Specifies the type—SSL or non-SSL—of the port at which the LDAP directory listens
ldap.ldapconn.
to requests from
secureConn
494 Netscape Certificate Management System Administrator's Guide • June 2003
If the attribute named in the
request, the policy accepts the request.
If the attribute named in the
request, the policy rejects the request.
parameter is not empty, the policy checks its value with the value
value
If the attribute named in the
the policy accepts the request.
If the attribute named in the
specified value, the policy rejects the request.
CMS
. Select for SSL, deselect for non-SSL.
parameter is present in the
attribute
parameter is not present in the
attribute
parameter.
attribute
parameter has the specified value,
attribute
parameter does not have the
attribute
policy.
CMS
.