Netscape Certificate Management System 6.0, Manual

Page: 261 / 377

LdapSimpleMap Plug-in Module
Chapter 5 Mapper Plug-in Modules 261
Figure 5-5
The LdapDNExactMap module
LdapSimpleMap Plug-in Module
The
LdapSimpleMap
plug-in module implements the simple mapper. This mapper
enables you to configure a Certificate Manager to map a certificate to an LDAP
directory entry by formulating the entry’s DN from components specified in the
certificate request, certificate’s subject name, certificate extension, and attribute
variable assertion (AVA) constants. For more information on AVAs, see the
directory documentation.
The simple mapper requires you to specify just one parameter, which is named
dnPattern
. The value of
dnPattern
can be a list of AVAs separated by commas.
An AVA can be a variable, such as
UID=$subj.UID
, , or a constant, such as
O=Example Corporation
. The examples below illustrate how you can use AVAs to
form the DN pattern.
Example 1:
uid=CertMgr, o=Example Corporation
Example 2:
CN=$subj.cn,OU=$subj.ou,O=$subj.o,C=US
Example 3: uid=
$req.HTTP_PARAMS.uid,
E=$ext.SubjectAlternativeName.RFC822Name,ou=$subj.ou
In the above examples,
$req
means take the attribute from the certificate request,
$subj
means take the attribute from the certificate subject name, and
$ext
means
take the attribute from the certificate extension.