Netscape Certificate Management System 6.1, Руководство администратора

Страница: 618 / 840

About Publishing
618 Netscape Certificate Management System Administrator’s Guide • February 2003
About Publishing
CMS is capable of publishing certificates to a file or an LDAP directory, and CRLs
to a file, an LDAP directory, or to an OSCP responder.
The publishing feature is very flexible allowing you to publish to a file, publish to
an LDAP directory, to an OSCP responder, or all three.
Further, you can set up certain kinds of certificates or CRLs to be published to
either medium, or all three. For example, you could publish CA certificates only to
a directory and not to a file, and publish user certificates to both a file and a
directory.
Note: An OCSP responder only provides information about CRLs, you do not
publish certificates to an OCSP responder.
You can also create different publishing locations for certificates files and crls files,
or even different publishing locations for different types of certificates files or
different types of CRL files. For example, you can publish CA certificates to one
location while publishing user certificates to a completely different location.
Similarly, you can publish different types of certificates to different places in a
directory, and different types of CRLs to different places in a directory. For
example, you can identify a type of user, for example ones from the west coast
division of the company and publish those user certificates in one branch of the
directory, while publishing certificates for users from the east coast division of the
company in another branch of the directory.
You can set up publishing in a Certificate Manager or a Registration Manager. The
Certificate Manager publishes the certificates and CRLs it issues. The Registration
Manager publishes the certificates it processes, but does not publish CRLs. You
may want to set up a Registration Manager for publishing because it publishes
outside the firewall, or to publish a subset of the certificates the Certificate
Manager creates—only those processed by the Registration Manager.
Setting up publishing involves configuring Publishers, Mappers, and Rules.