Netscape Certificate Management System 6.0, Manual

Page: 241 / 377

SubjectDirectoryAttributesExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 241
predicate
Specifies the predicate expression for this rule. If you want this rule to be
applied to all certificate requests, leave the field blank (default). To form a
predicate expression, see section “Using Predicates in Policy Rules” in Chapter
18, “Setting Up Policies” of CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client AND
HTTP_PARAMS.OU==Engineering
critical
Specifies whether the extension should be marked critical or noncritical in
certificates specified by the
predicate
parameter. Check the box if you want
the server to mark the extension critical. Uncheck the box if you want the server
to mark the extension noncritical (default).
numAttributes
Specifies the total number of directory attributes to be contained or allowed in
the extension. Note that each attribute has a name (or OID) and value and you
must specify appropriate values for both; otherwise the policy rule will return
an error.
You can configure the server to include up to three attributes in the extension.
By default, this field is set to its maximum value,
3
, and the UI shows fields for
configuring three attributes. You can change the total number of attributes by
changing the value of this parameter. Each set of configuration parameters is
distinguished by
<n>
, which is an integer derived from the value you assign in
this field. For example, if you set the
numAttributes
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
1
,
2
, or
3
. The default value is 3.
Example:
1
attribute<n>.attrib
uteName
Specifies the name of the directory attribute whose value is to be included in
the extension.
Permissible values:
TITLE
,
O
,
OU
,
L
,
E
,
C
,
GIVENNAME
,
DC
,
UID
,
CN
,
UNSTRUCTUREDNAME
,
GENERATIONQUALIFIER
,
ST
,
DNQUALIFIER
,
SN
,
MAIL
,
UNSTRUCTUREDADDRESS
,
STREET
,
SERIALNUMBER
, and
INITIALS
. The list
may show any additional attributes that you may have added.
Example:
TITLE
Table 4-27
Description of parameters defined in the SubjectDirectoryAttributesExt module (Continued)
Parameter Description