Netscape Certificate Management System 6.1, Administrator'S Manual

Page: 637 / 840

Mappers
Chapter 15 Publishing 637
Mapper Plug-in Modules Reference
This section describes the mapper plug-in modules provided for the Certificate
Manager. You can use these modules to configure a Certificate Manager to enable
and configure specific Mapper instances.
The available mapper plug-in modules include the following:
• LdapCaSimpleMap
• LdapDNExactMap
• LdapSimpleMap
• LdapSubjAttrMap
• LdapDNCompsMap
You can develop a custom mapper module using the CMS SDK.
LdapCaSimpleMap
The
LdapCaSimpleMap
plug-in module enables you to configure a Certificate
Manager to automatically create an entry for the CA in an LDAP directory and
then map the CA’s certificate to the directory entry by formulating the entry’s DN
from components specified in the certificate request, certificate subject name,
certificate extension, and attribute variable assertion (AVA) constants. For more
information on AVAs, check the directory documentation.
The CA certificate mapper allows you to specify whether to create an entry for the
CA or to just map the certificate to an existing entry, or to do both.
Note that if you already have one CA entry created in the publishing directory and
if you change the value assigned to the
dnPattern
parameter of this mapper to
something different, but with the same UID and O attributes, the mapper will fail
to create the second CA entry. For example, if the directory already has a CA entry
with
UID=CA,OU=Marketing,O=example.com
and if you configure the mapper to
create another CA entry with
UID=CA,OU=Engineering,O=example.com
, the
operation will fail.
The reason for the failure may be because you are using a directory (for example,
the configuration directory) that has the uid uniqueness plug-in set to a specific base
DN in the
slapd.ldbm.conf
file. This setting prevents the directory from having
two entries with the same UID under that base DN. For example, it prevents the
directory from having two entries under
O=example.com
with the same UID,
CA
.