Netscape Certificate Management System 6.0, Manual

Page: 45 / 377

PortalEnroll Plug-in Module
Chapter 1 Authentication Plug-in Modules 45
❍
If the server fails to find a matching user name in the directory, it uses the
registration information to create a user entry for the new user and add
relevant attributes. The server also retrieves information required to
construct the subject name for the certificate.
If, for some reason, the directory to which the server binds for authenticating
the user ID and password is unavailable, the server returns an LDAP error
code and writes it to the log. A sample log entry with an LDAP error code is
shown below:
28/Jun/1999:18:40:25 -0700] conn=0 op=7 RESULT err=32 tag=101
nentries=0 etime=0]
3.
Next, the server subjects the certificate request to policy processing. For details,
see Chapter 18, “Setting Up Policies” of CMS Installation and Setup Guide.
❍
If the request fails any of the configured policies, the server rejects the
request, logs an error message, and sends a rejection notification to the end
user. Note that if this happens, the user won’t be able to reregister using
the same user name.
❍
If the request passes all the configured policies, the server issues the end
user a certificate.
The end user gets the certificate, which, if the server is configured to do so,
is delivered to the email address specified in the request or in the directory;
for information on configuring a Certificate Manager or Registration
Manager to send automated notifications, see section “Notifications of
Certificate Issuance to End Entities” in Chapter 16, “Setting Up Automated
Notifications” of CMS Installation and Setup Guide.
Configuration Parameters of PortalAuth
In the configuration file, the
PortalEnroll
module is identified as
auths.impl.PortalEnroll.class=com.netscape.cms.authentication.
PortalEnroll
.
In the CMS window, the module is identified as
PortalEnroll
. Figure 1-9 shows
how configurable parameters for the module are displayed in the CMS window.