Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 375 / 840

Automated Enrollment
Chapter 10 Authentication 375
• In the case of policy-based enrollments, customize the HTML enrollment forms. Make
sure the proper authentication method is contained in the form, and do any other
customization required.
In the enrollment form you use, be sure to include the following line, and replace
myAuthMgr
with the name of the authentication instance you added.
<INPUT TYPE="HIDDEN" NAME="authenticator" VALUE="myAuthMgr">
For more information on customizing the enrollment forms, see the CS Customization
Guide .
• In the case of certificate profile-based enrollments, customize the enrollment forms by
configuring the inputs in the certificate profile. Make sure you include the information
that will be needed by the plug-in to authenticate the user. If the default inputs do not
contain all of the information that needs to be collected, you can either create an input
that does using the CS SDK, or submit a request created with a third-party tool.
Setting Up the UidPwdDirAuth or UdnPwdDirAuth Authentication
To set up one of these two methods of authentication:
1.
In the CS window of the Certificate Manager or Registration Manager that processes
certificate requests, select the Configuration tab.
2.
Select Authentication in the navigation tree.
The right pane shows the Authentication Instance tab listing currently configured
authentication instances.
3.
Click Add.
The Select Authentication Plug-in Implementation window appears.
4.
Select
UidPwdDirAuth
for authentication based on user ID and password, select
UdnPwdDirAuth
for authentication based on DN and password.
5.
Click Next.
The Authentication Instance Editor window appears.
6.
Fill in the following fields in the Authentication Instance Editor window:
Authentication Instance ID. Accept the default instance name, or enter a new name.
If you choose to use a different name, be sure to edit this name in the hidden value in
the enrollment forms.
dnpattern. Specifies a string representing a subject name pattern to formulate from the
directory attributes and entry DN. See “DNs in Certificate System” on page 756.