DNs in Certificate Management System
312
Netscape Certificate Management System Plug-Ins Guide • May 2002
Typically, an LDAP search consists of the following components:
•
The base DN—for example,
O=example.com
,
C=US
, which initiates a subtree
search through all entries below this entry in the directory (in other words, all
entries with the suffix
O=example.com
,
C=US
).
•
The search type, which can be a base search (only the entry specified by the
base DN is searched), a one-level search (only entries one level below the base
entry are searched), or a subtree search (all entries at all levels below the base
entry are searched).
•
The search filter, which specifies the search criteria applied to each entry
within the scope of the search.
When Certificate Management System is configured for LDAP publishing, the
search point and search criteria are determined by the configuration parameter
values; for details, see information about the mapper or publisher classes in
Chapter 5, “Mapper Plug-in Modules” and Chapter 6, “Publisher Plug-in
Modules.” In the absence of a base DN value, Certificate Management System uses
DN components in the certificate’s subject name to construct the base DN so that it
can search the directory in order to publish to or update the appropriate directory
entry.
Typically, when you configure Certificate Management System for LDAP
publishing, you set the base DN value to
Directory Manager
, so that it can use the
publishing directory’s root entry to start searching; see section “Configuring a
Certificate Manager to Publish Certificates and CRLs” in Chapter 19, “Setting Up
LDAP Publishing” of CMS Installation and Setup Guide.
DNs in Certificate Management System
In Certificate Management System, the characters allowed in a DN are based on the
components (attributes) as defined in the X.509 standard.
Table A-2 lists the attributes supported by default and their character sets.
Explanation of the character sets are in Table A-3. The set of attributes is extensible.
Table A-2
Allowed characters for value types
Attribute
Value type
Object identifier
CN
Directory String
2.5.4.3
OU
Directory String
2.5.4.11
O
Directory String
2.5.4.10
Summary of Contents for Certificate Management System 6.01
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 01 May 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide May 2002...
