Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 605 / 866

605
Chapter 19
Setting Up LDAP Publishing
Netscape Certificate Management System (CMS) provides a customizable
publishing framework for the Certificate Manager, enabling it to publish
certificates, certificate revocation lists (CRLs), and other certificate-related objects
to any of the supported repositories—an LDAP-compliant directory, a flat file, and
an online validation authority—using the appropriate protocol.
The ability of a Certificate Manager to publish certificates, CRLs, and other
certificate-related objects to a directory using the LDAP or LDAPS protocol is
called LDAP publishing and the directory to which it publishes is called the
publishing directory.
This chapter explains how to configure the Certificate Manager to publish
certificates and CRLs to an LDAP directory. The chapter also tells you how to
update the directory manually, if the need arises.
The chapter has the following sections:
• Publishing of Certificates to a Directory (page 605)
• Publishing of CRLs (page 610)
• Configuring a Certificate Manager to Publish Certificates and CRLs (page 615)
• Manually Updating Certificates and CRLs in a Directory (page 662)
Publishing of Certificates to a Directory
Large corporations typically use Lightweight Directory Access Protocol (LDAP)
directories, such as Netscape Directory Server, to store and manage corporatewide
data, including user and group information and network resource data. If you
have deployed an LDAP-compliant directory, you can configure the Certificate
Manager to automatically publish your CA and end-entity certificate-related