Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 390 / 874

Automated Enrollment
390 Netscape Certificate Management System Administrator’s Guide • June 2003
In the absence of an LDAP directory, subject names of all certificates issued by the
server will be of the form
CN=<FirstName LastName>,UID=<UserID>
, where
First Name
and
Last Name
is a user’s first and last names as specified in the NIS
directory, and
UserID
is the user’s NIS ID. To accommodate scenarios where the
default subject-name form isn’t adequate, the module supports a parameter named
extendedDN
. This parameter enables you to specify a suffix that the server should
use for extending the default subject DN pattern.
To set up NIS based authentication you do the following:
• Set any policies for certificate extensions, or for constraints on certificates, see
Chapter 11, “Policies” for information about policies. Alternatively, you can
enroll users through the certificate profile functionality setting policies for
specific certificates in the certificate profile, see Chapter 10, “Certificate
Profiles” for information about policies.
• Create an instance of the
NISAuth
Authentication plug-in module and
configure the instance. See “Setting Up the NISAuth Authentication,” on page
390 for details.
• Customize the HTML enrollment forms. Make sure the proper authentication
method is contained in the form, and do any other customization required.
In the enrollment form you use, be sure to include the following line, and
replace
myAuthMgr
with the name of the authentication instance you added.
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CMS
Customization Guide.
• In the case of certificate profile-based enrollments, customize the enrollment
forms by configuring the inputs in the certificate profile. Make sure you
include the information that will be needed by the plug-in to authenticate the
user. If the default inputs do not contain all of the information that needs to be
collected, you can either create an input that does using the CMS SDK, or
submit a request created with a third-party tool.
Setting Up the NISAuth Authentication
To setup this method of authentication:
1.
In the CMS window of the Certificate Manager or Registration Manager that
processes certificate requests, select the Configuration tab.
2.
Select Authentication in the navigation tree.