Netscape Certificate Management System 6.0, Manual

Page: 322 / 377

DNs in Certificate Management System
322 Netscape Certificate Management System Plug-Ins Guide • March 2002
Syntax
dnPattern := rdnPattern *[ "," rdnPattern ]
rdnPattern := avaPattern *[ "+" avaPattern ]
avaPattern := name "=" value | name "=" "$attr" "." attrName [ "."
attrNumber ] | name "="
"$dn" "." attrName [ "." attrNumber ] | "$dn" "." "$rdn" "." number
Example 1
If the configured DN pattern is
E=$attr.mail.1, CN=$attr.cn, OU=$dn.ou.2, O=$dn.o, C=US
LDAP entry:
dn: UID=jdoe, OU=IS, OU=people, O=example.com
LDAP attributes:
cn: Jane Doe
LDAP attributes:
mail: jdoe@example.com
The subject name formulated will be as follows:
E=jdoe@example.com, CN=Jane Doe, OU=people, O=example.com, C=US
E=
the first ‘mail’ LDAP attribute value in user’s entry.
CN=
the (first) ‘
cn
’ LDAP attribute value in the user’s entry.
OU=
the second ‘
ou
’ value in the user’s entry DN.
O=
the (first) ‘
o
’ value in the user’s entry DN.
C=
the string ‘US’
Example 2
If the configured DN pattern is
E=$attr.mail.1, CN=$attr.cn, OU=$dn.ou.2, O=$dn.o, C=US
LDAP entry:
dn: UID=jdoe, OU=IS+OU=people, O=example.com
LDAP attributes:
cn: Jane Doe
LDAP attributes:
mail: jdoe@example.com
The subject name formulated will be as follows:
E=jdoe@example.com, CN=Jane Doe, OU=people, O=example.com, C=US
E=
the first ‘
mail
’ LDAP attribute value in user’s entry.
CN=
the (first) ‘
cn
’ LDAP attribute value in the user’s entry.
OU=
the second ‘
ou
’ value in the user’s entry DN; note the multiple AVAs in a
RDN in this example.
O=
the (first) ‘
o
’ value in the user’s entry DN.
C=
the string ‘US’