Netscape Certificate Management System 6.1, Руководство администратора

Страница: 639 / 840

Mappers
Chapter 15 Publishing 639
LdapCaCertMap
The mapper named
LdapCaCertMap
is an instance of the
LdapCaSimpleMap
module. The Certificate Manager automatically creates this mapper during
installation.
You can use this mapper for creating an entry for the CA in the directory and for
mapping the CA certificate to the CA’s entry in the directory.
By default, the mapper is configured to create an entry for the CA in the directory
and the default DN pattern for locating the CA’s entry is as follows:
UID=$subj.cn,OU=people,O=$subj.o
LdapCrlMap
The mapper named
LdapCrlMap
is an instance of the
LdapCaSimpleMap
module.
The Certificate Manager automatically creates this mapper during installation.
You can use this mapper for creating an entry for the CA in the directory and for
mapping the CRL to the CA’s entry in the directory.
By default, the mapper is configured to create an entry for the CA in the directory
and the default DN pattern for locating the CA’s entry is as follows:
UID=$subj.cn,OU=people,O=$subj.o
Example 1:
uid=CertMgr, o=Example Corporation
Example 2:
CN=$subj.cn,OU=$subj.ou,O=$subj.o,C=US
Example 3:
uid=$req.HTTP_PARAMS.uid,
E=$ext.SubjectAlternativeName.RFC822Name,ou=$subj.
ou
In the above examples,
$req
means take the attribute from the
certificate request,
$subj
means take the attribute from the
certificate subject name, and
$ext
means take the attribute from the
certificate extension.
Table 15-8 LdapCaSimpleMap Configuration Parameters (Continued)
Parameter Description