Netscape Certificate Management System 6.01, Manual

Page: 118 / 377

UniqueSubjectNameConstraints Plug-in Module
118 Netscape Certificate Management System Plug-Ins Guide • May 2002
Figure 3-12
Parameters of the UniqueSubjectNameConstraints module
The configuration shown in Figure 3-12 creates a policy rule named
UniqueNameForAllCert
, which enforces a rule that all certificates must have
unique subject names.
Table 3-12 describes each of the parameters.
Table 3-12 Description of parameters defined in the UniqueSubjectNameConstraints module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server
checks the certificate requests, as specified by the
predicate
parameter, for
subject name uniqueness.
• If you disable the rule, the server does not check the certificate requests for subject
name uniqueness.
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client