Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 631 / 840

Publishers
Chapter 15 Publishing 631
FileBasedPublisher
The
FileBasedPublisher
plug-in module enables you to configure a Certificate
Manager to publish certificates and CRLs to files.
By default, the Certificate Manager does not create an instance of the
FileBasedPublisher
module.
LdapCaCertPublisher
The
LdapCaCertPublisher
plug-in module enables you to configure a Certificate
Manager to publish or unpublish a CA certificate to the
caCertificate;binary
attribute of the CA’s directory entry.
The module also converts the object class of the CA’s entry to a
certificationAuthority
if it’s not one already. Similarly, it also removes the
certificationAuthority
object class on unpublish if the CA has no other
certificates.
During installation, the Certificate Manager automatically creates an instance of
the
LdapCaCertPublisher
module for publishing the CA certificate to the
directory that is already enabled and configured.
Table 15-1 FileBasedPublisher Configuration Parameters
Parameter Description
Publisher ID
Specifies a name for the publisher. You can use an alphanumeric
string with no spaces. For example,
PublishCertsToFile
.
directory
Specifies the complete path to the directory in which the Certificate
Manager should create the DER-encoded files; the path can be an
absolute path or can be relative to the CMS instance directory. For
example,
/export/cms/certificates
.
Table 15-2
LdapCaCertPublisher Configuration Parameters
Parameter Description
caCertAttr
Specifies the LDAP directory attribute to publish the CA certificate.
Must be
caCertificate;binary
.
caObjectClass
Specifies the object class for the CA’s entry in the directory. Must
be
certificationAuthority
.