Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 402 / 866

Groups and Their Privileges
402 Netscape Certificate Management System Installation and Setup Guide • October 2001
The
Online Certificate Status Manager Agents
group has access rights to
agent-specific resources of the Online Certificate Status Manager; that is, privileged
users you add to this group automatically inherit access rights to the agent ports of
the Online Certificate Status Manager. For information on ports, see “CMS Ports”
on page 371.
After installation, you should add to this group the privileged users to whom you
want to assign Online Certificate Status Manager agent privileges. All agents who
belong to the
Online Certificate Status Manager Agents
group can access the
Online Certificate Status Manager Agent Services interface; see “Online Certificate
Status Manager Agent Services Interface” on page 71.
For an agent to be able to do SSL client-authenticated communication with a
Online Certificate Status Manager, you need to do additional configurations. See
“Setting Up Agents” on page 406.
Group for Trusted Managers
When the Certificate Manager, Registration Manager, or Data Recovery Manager is
installed, a group called
Trusted Managers
is automatically created in its internal
database. By default, this group has no entries.
The
Trusted Managers
group has access rights to the corresponding agent
gateway; that is, the subsystems you add to this group automatically inherit access
rights to the agent port of the corresponding Certificate Manager, Registration
Manager, or Data Recovery Manager. For information on ports, see “CMS Ports”
on page 371.
After installation, you should add to this group the subsystems that you want to
function as trusted managers. All subsystems that belong to the
Trusted
Managers
group can carry on SSL client-authenticated communication with the
subsystem that trusts them and receive responses back.
For a Registration Manager to be able to do SSL client-authenticated
communication with a subsystem, you need to do additional configurations. See
“Setting Up Trusted Managers” on page 413.