Netscape Certificate Management System 6.0, Manual

Page: 239 / 377

SubjectDirectoryAttributesExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 239
The subject directory attributes extension policy in Certificate Management System
allows you to include up to three directory attributes in the extension. For each
attribute that you want to include in the extension, you need to specify the attribute
name and its value—the name must be the X.500 directory attribute name itself and
the attribute value can be derived from the request or directly entered in the policy
configuration as a string value.
The list of directory attributes supported by default are shown as permissible
values for the
attribute<n>.attributeName
parameter explained in Table 4-27
on page 240. You can extend the list of attributes supported by the policy by
defining new X.500 directory attributes. For details on defining new attributes, see
“Extending Attribute Support” on page 314.
Note that, during installation, Certificate Management System does not create an
instance of the subject directory attributes extension policy. If you want the server
to add this extension to certificates, you must create an instance of the
SubjectDirectoryAttributesExt
module and configure it. For instructions, see
section “Step 4. Add New Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Configuration Parameters of
SubjectDirectoryAttributesExt
In the CMS configuration file, the
SubjectDirectoryAttributesExt
module is
identified as
<subsystem>.Policy.impl.SubjectDirectoryAttributesExt.
class=com.netscape.cms.policy.SubjectDirectoryAttributesExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying the subsystem).
In the CMS window, the module is identified as
SubjectDirectoryAttributesExt
. Figure 4-28 shows how the configurable
parameters for the module are displayed in the CMS window.