Netscape Certificate Management System 6.1, Руководство администратора

Страница: 559 / 840

Extension-Specific Policy Module Reference
Chapter 11 Policies 559
numGeneralNames
Specifies the total number of alternative names or identities permitted in the
extension. Note that each name has a set of configuration
parameters—
generalName<n>.requestAttr
and
generalName<n>.generalNameChoice
—and you must specify appropriate
values for each of those parameters; otherwise the policy rule will return an
error.
You can change the total number of identities by changing the value of this
parameter; there’s no restriction on the total number of identities you can
include in the extension. Each set of configuration parameters is distinguished
by
<n>
, which is an integer derived from the value you assign in this field. For
example, if you set the
numGeneralNames
parameter to 2,
<n>
would be
0
and
1
.
•
0
specifies that no identities can be contained in the extension.
•
n
specifies the total number of identities to be included in the extension; it
must be an integer greater than zero. The default value is 8.
generalName<n>.
requestAttr
Specifies the request attribute whose value is to be included in the extension. The
attribute value must conform to any of the supported general-name types
(specified by the
generalName<n>.generalNameChoice
parameter). If the
server finds the attribute in the request, it sets the attribute value in the extension
and then adds the extension to certificates specified by the
predicate
parameter. If you specify multiple attributes and if none of the attributes are
present in the request, the server does not add the subject alternative name
extension to certificates.
Permissible values: A request attribute included in the certificate request.
Example:
AUTH_TOKEN.mail
generalName<n>.
generalNameChoice
Specifies the general-name type for the request attribute.
Permissible values:
rfc822Name
,
directoryName
,
dNSName
,
ediPartyName
,
URL
,
iPAddress
,
OID
, or
otherName
.
• Select
rfc822Name
if the request-attribute value is an Internet mail address
in the
local-part@domain
format (default). For example,
jdoe@example.com
.
• Select
directoryName
if the request-attribute value is an X.500 directory
name, similar to the subject name in a certificate. For example,
CN=Jane Doe, OU=Sales Dept, O=Example Corporation, C=US
.
Table 11-39 SubjectAltNameExt Configuration Parameters (Continued)
Parameter Description