Netscape Certificate Management System 6.0, Manual

Page: 22 / 377

UidPwdDirAuth Plug-in Module
22 Netscape Certificate Management System Plug-Ins Guide • March 2002
These are the steps shown in Figure 1-2:
1.
In the manual enrollment form, the end entity enters the information needed to
request a certificate and submits the request to the server.
2.
When the server receives the request, it automatically lists the request in a
certificate request queue for an agent to process.
3.
An agent verifies the authenticity of the request.
❍
If the request is from a valid end entity, the agent verifies that all the
information the end entity has provided in the request is correct, makes
required modifications, if any, and approves the certificate request for
issuance.
❍
If the request is from an invalid end entity, the agent rejects the request,
which in turn triggers a rejection notification to the end entity.
4.
When the server receives the agent-approved request, it subjects it to policy
processing. For details, see Chapter 18, “Setting Up Policies” of CMS
Installation and Setup Guide.
❍
If the request fails any of the configured policies, the server rejects the
request, logs an error message, and sends a rejection notification to the end
entity.
❍
If the request passes all the configured policies, the server issues the
certificate.
The certificate is delivered to the email address specified in the certificate
request.
UidPwdDirAuth Plug-in Module
The
UidPwdDirAuth
plug-in module implements the directory-based
authentication method. You can use this module for authenticating end users,
provided their information is stored in an LDAP directory, during certificate
enrollment.
Here’s how the enrollment method works: as part of configuring a Certificate
Manager and a Registration Manager, or both, for authentication, you specify an
LDAP directory that the server must use to authenticate end users. End users enroll
for a certificate by entering their user IDs and passwords for this authentication