Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 49 / 377

PortalEnroll Plug-in Module
Chapter 1 Authentication Plug-in Modules 49
ldap.ldapauth.
authtype
Specifies the authentication type—basic authentication or SSL client
authentication—required to communicate with the portal directory.
Permissible values:
BasicAuth
or
SslClientAuth
.
•
BasicAuth
specifies basic authentication. If you choose this option, be
sure to enter the correct values for
ldap.ldapauth.bindDN
and
password
parameters; the server uses the DN from the
ldap.ldapauth.bindDN
attribute to bind to the directory (default).
•
SslClientAuth
specifies SSL client authentication. If you choose this
option, be sure to set the value of the
ldap.ldapconn.secureConn
parameter to
true
and the value of the
ldap.ldapauth.clientCertNickname
parameter to the nickname of
the certificate to be used for SSL client authentication.
Example:
BasicAuth
ldap.basedn
Specifies the base DN for searching the portal directory—the server uses the
value of the
uid
field from the HTTP input (what a user enters in the
enrollment form) and the base DN to construct an LDAP search filter.
Permissible values: Any valid DN string of up to 255 characters.
Example:
O=example.com
ldap.objectclass
Specifies the object class to modify or update in the portal directory.
Permissible values: Must be
inetOrgPerson
for the default portal
enrollment form; see “Enrollment Forms” on page 53.
Example:
inetOrgPerson
ldap.minConns
Specifies the minimum number of connections permitted to the directory.
Permissible values:
1
to
3
Example:
2
ldap.maxConns
Specifies the maximum number of connections permitted to the directory.
Permissible values:
3
to
10
Example:
10
Table 1-5
Description of parameters defined in the PortalEnroll module (Continued)
Parameter Description