Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 815 / 866

Setting up CEP Enrollment Manually
Chapter 25 Setting Up CEP Enrollment 815
Once this is done, you may configure the Certificate Manager for automated
enrollment. To do so, follow the steps in the next section. If you do not want to
configure the server for automated enrollment, restart the server.
entryObject
Class
Specifies the type of object to assign to the new entry. By default, this is
cep
, and should
not be changed. Note that when
createEntry=true
, the Certificate Manager will
attempt to create an entry for the user. The directory hierarchy must be set up correctly
beforehand to accept new entries. To clarify this by an example, if you expect the
Certificate Manager to be able to create an entry for a certificate with DN
CN=John
Doe, OU=Accounting, O=Company, C=US
, you must have already created three (3)
directory entries for
C=US
O=Company, C=US
OU=Accounting, O=Company, C=US
You can do this with the help of the
ldapmodify
command and an LDIF file with the
following information:
dn: C=US
changetype: add
objectclass: top
objectclass: country
c: US
dn: O=Company, C=US
changetype: add
objectclass: top
objectclass: organization
o: Company
dn: OU=Accounting, O=Company, C=US
changetype: add
objectclass: top
objectclass: organizationalunit
ou: Accounting
dn: cn=config,cn=ldbm
changetype: modify
add: nsslapd-suffix
nsslapd-suffix: C=US
Also, note that in this case,
C=US
is the root of your directory, because it is the sole
component of the DN. To create a new root, you must first add a new suffix, which is
done by adding this to your LDIF file (see the last section of the LDIF file above). For
more details, check the Netscape Directory Server documentation.
Table 25-1
CEP service-related configuration parameters in the configuration file (Continued)
Parameter Description