Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 28 / 377

UidPwdPinDirAuth Plug-in Module
28 Netscape Certificate Management System Plug-Ins Guide • March 2002
UidPwdPinDirAuth Plug-in Module
The
UidPwdPinDirAuth
plug-in module implements the directory- and PIN-based
authentication method. You can use this module for authenticating users in the
global LDAP domain during certificate enrollment. This authentication method is
functionally very similar to the directory-based authentication explained in
“UidPwdDirAuth Plug-in Module” on page 22, except that for stronger
authentication you combine a PIN or one-time password with the end users’ user
IDs and passwords.
ldap.ldapconn.
version
Specifies the LDAP protocol version.
Permissible values:
2
or
3
.
•
2
specifies LDAP version 2. If your authentication directory is based on
Netscape Directory Server 1.x, choose
2
.
• 3 specifies LDAP version 3. For Directory Server versions 3.x and later,
choose
3
.
Example:
3
ldap.basedn
Specifies the base DN for searching the authentication directory—the server
uses the value of the
uid
field from the HTTP input (what a user enters in the
enrollment form) and the base DN to construct an LDAP search filter.
Permissible values: Any valid DN string of up to 255 characters.
Example:
O=example.com
ldap.minConns
Specifies the minimum number of connections permitted to the authentication
directory.
Permissible values:
1
to
3
.
Example:
2
ldap.maxConns
Specifies the maximum number of connections permitted to the
authentication directory.
Permissible values:
3
to
10
.
Example:
8
Table 1-2
Description of parameters defined in the UidPwdDirAuth module (Continued)
Parameter Description