Netscape Certificate Management System 6.01, Manual

Page: 257 / 377

LdapDNCompsMap Plug-in Module
Chapter 5 Mapper Plug-in Modules 257
To specify the components the Certificate Manager must use to distinguish
between different entries in the directory, use the
filterComps
parameter; for
details, see Table 5-3 on page 258. For example, if you entered
CN
,
OU
,
O
, and
C
as
values for the
dnComps
parameter, enter
L
for the
filterComps
parameter only if
the
L
attribute can be used to distinguish between entries with identical
CN
,
OU
,
O
,
and
C
values.
Consider another example that shows how two directory entries with similar DNs
can be differentiated by the value of the
UID
attribute:
Assume that the two Jane Doe entries are distinguished by the value of the
UID
attribute. One entry’s
UID
value is
janedoe1
and the other entry’s
UID
value is
janedoe2
. Because the
UID
attribute corresponds to the
UID
component in a DN,
you can set up the subject names of certificates to include the
UID
component.
Configuration Parameters of LdapDNCompsMap
In the configuration file, the
LdapCertCompsMap
module is identified as
ca.publish.mapper.impl.LdapDNCompsMap.class=com.netscape.cms.
publish.LdapCertCompsMap
.
In the CMS window, the module is identified as
LdapDNCompsMap
. Figure 5-4
shows how the configurable parameters for the module are displayed in the CMS
window.
NOTE Generally, the
E
,
L
, and
ST
components are not included in the
standard set of certificate request forms provided for end entities.
You can add these components to the forms, or you can have the
issuing agents insert these components when editing the subject
name in the certificate issuance forms.