LdapDNCompsMap Plug-in Module
Chapter
5
Mapper Plug-in Modules
255
begin a subtree search and the filter components to form a search filter for the
subtree. If none of the DN components are configured, the server uses the base DN
for the subtree. If the base DN is null and none of the DN components match, an
error is returned. If none of the DN components and filter components match, an
error is returned. If the filter components are null, a base search is performed.
Note that both
DNComps
and
filterComps
parameters accept valid DN
components or attributes separated by commas. The parameters don’t accept
multiple entries of an attribute; for example, you can set
filterComps
to
CN,OU
,
but not to
CN,OU2,OU1
. If there’s a need for you to support such a filter, for
example, if your directory entries contain multiple
OU
s and you want to use
multiple
OU
s in your
filterComps
for filtering entries, you can modify the source
code for the
LdapDNCompsMap
module. The java class for the module is in this
directory:
<server_root>/cms_sdk/cms_jdk/samples/mappers
The discussion below explains how mapping by DN components works. It is
recommended that you read this before configuring a Certificate Manager to use
this mapper.
Subject names in certificates are in distinguished-name format. A distinguished name
(DN) uniquely identifies an entry in an LDAP directory. The DN consists of
components that help identify the entry; for details, see Appendix , “Distinguished
Names.”
The following components are commonly used in DNs:
•
UID
, which represents the user ID of a user in the directory
•
CN
, which represents the common name of a user in the directory
•
OU
, which represents an organizational unit in the directory
•
O
, which represents an organization in the directory
•
L
, which represents a locality in the directory
•
ST
, which represents a state in the directory
•
C
, which represents a country in the directory
For example, the following DN represents the user named Jane Doe who works for
the Sales department at Example Corporation, which is located in Mountain View
in the state of California, United States:
CN=Jane Doe, [email protected], OU=Sales, O=Example Corporation,
L=Mountain View, ST=California, C=US
Summary of Contents for Certificate Management System 6.0
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
