Netscape Certificate Management System 6.01, Manual

Page: 27 / 377

UidPwdDirAuth Plug-in Module
Chapter 1 Authentication Plug-in Modules 27
ldapByteAttributes
Specifies the list of LDAP byte (binary) attributes that should be considered
authentic for the end entity. If specified, the values corresponding to these
attributes will be copied from the authentication directory into the
authentication token for use by other modules—that is, values retrieved from
this parameter can be used by policy modules to make certain policy decisions
or to add additional information to users’ certificates.
For example, assume you have defined an LDAP binary attribute for storing
users’ pictures or fingerprints in your directory. You could develop a policy
plug-in that adds users’ pictures to their certificates as extensions.
Entering values for this parameter is optional.
Permissible values: Any valid LDAP byte attributes, separated by commas.
Example:
jpegPhoto
This sample configuration specifies that the value of the LDAP attribute
named
jpegPhoto
(which is included in the standard
inetOrgPerson
object class) should be stored in the authentication token and be used to put
the user’s picture in his or her certificate.
ldap.ldapconn.host
Specifies the host name of the authentication directory.
Permissible values: The name must be in the
<machine_name>.<your_domain>.<domain>
form.
Example:
corpDirectory.example.com
ldap.ldapconn.port
Specifies the TCP/IP port at which the authentication directory listens to
requests from Certificate Management System.
Permissible values: Any valid port number.
Example:
389
ldap.ldapconn.
secureConn
Specifies the type—SSL or non-SSL—of the port at which the authentication
directory listens to requests from Certificate Management System.
• Check the box if the port is an SSL (HTTPS) port. If your authentication
directory is configured for SSL-enabled communication (with or without
SSL client authentication), choose this option.
• Leave the box unchecked if the port is a non-SSL (HTTP) port. If your
authentication directory is configured for basic authentication, choose this
option (default).
Table 1-2
Description of parameters defined in the UidPwdDirAuth module (Continued)
Parameter Description