Netscape Certificate Management System 6.1, Руководство администратора

Страница: 545 / 840

Extension-Specific Policy Module Reference
Chapter 11 Policies 545
permittedSubtrees<n>.
min
Specifies the minimum number of permitted subtrees.
Permissible values:
-1
,
0
, or
n
.
•
-1
specifies that the field should not be set in the extension.
•
0
specifies that the minimum number of subtrees is zero (default).
•
n
must be an integer that is greater than zero. It specifies at the most
n
subtrees are allowed.
permittedSubtrees<n>.
max
Specifies the maximum number of permitted subtrees.
Permissible values:
-1
,
0
, or
n
.
•
-1
specifies that the field should not be set in the extension (default).
•
0
specifies that the maximum number of subtrees is zero.
•
n
must be an integer that is greater than zero. It specifies at the most
n
subtrees are allowed.
excludedSubtrees<n>.
base.generalNameChoice
Specifies the general-name type for the excluded subtree you want to
include in the extension.
Permissible values:
rfc822Name
,
directoryName
,
dNSName
,
ediPartyName
,
URL
,
iPAddress
,
OID
, or
otherName
.
• Select
rfc822Name
if the subtree is an Internet mail address.
• Select
directoryName
if the subtree is an X.500 directory name.
• Select
dNSName
if the subtree is a DNS name.
• Select
ediPartyName
if the subtree is a EDI party name.
• Select
URL
if the subtree is a uniform resource locator.
• Select
iPAddress
if the subtree is an IP address.
• Select
OID
if the subtree is an object identifier.
• Select
otherName
if the subtree is in any other name form.
excludedSubtrees<n>.
base.generalNameValue
Specifies the general-name value for the excluded subtree you want to
include in the extension.
Table 11-29 NameConstraintsExt Configuration Parameters (Continued)
Parameter Description