Netscape Certificate Management System 6.01, Manual

Page: 34 / 377

UidPwdPinDirAuth Plug-in Module
34 Netscape Certificate Management System Plug-Ins Guide • May 2002
ldap.ldapauth.
clientCertNickname
Specifies the nickname or the friendly name of the certificate to be used for
SSL client authentication to the authentication directory in order to remove
PINs. Make sure that the certificate is valid and has been signed by a CA that
is trusted in the authentication directory’s certificate database, and that the
authentication directory’s
certmap.conf
file has been configured to
correctly map the certificate to a DN in the directory. (This is needed for PIN
removal only.)
Permissible values: Enter the name of a currently valid CMS certificate, for
example, its SSL server certificate.
Example:
Server-Cert
ldap
.ldapauth.
authtype
Specifies the authentication type—basic authentication or SSL client
authentication—required in order to remove PINs from the authentication
directory.
Permissible values:
BasicAuth
or
SslClientAuth
.
•
BasicAuth
specifies basic authentication. If you choose this option, be
sure to enter the correct values for
ldap.ldapauth.bindDN
and
password
parameters; the server uses the DN from the
ldap.ldapauth.bindDN
attribute to bind to the directory (default).
•
SslClientAuth
specifies SSL client authentication. If you choose this
option, be sure to set the value of the
ldap.ldapconn.secureConn
parameter to
true
and the value of the
ldap.ldapauth.clientCertNickname
parameter to the nickname of
the certificate to be used for SSL client authentication.
Example:
BasicAuth
ldap.basedn
Specifies the base DN for searching the authentication directory—the server
uses the value of the
uid
field from the HTTP input (what a user enters in the
enrollment from) and the base DN to construct an LDAP search filter.
Permissible values: Any valid DN string of up to 255 characters.
Example:
O=example.com
ldap.minConns
Specifies the minimum number of connections permitted to the authentication
directory.
Permissible values:
1
to
3
.
Example:
3
Table 1-3
Description of parameters defined in the UidPwdPinDirAuth module (Continued)
Parameter Description