Netscape Certificate Management System 6.1, Руководство администратора

Страница: 643 / 840

Mappers
Chapter 15 Publishing 643
•
O
, which represents an organization in the directory
•
L
, which represents a locality in the directory
•
ST
, which represents a state in the directory
•
C
, which represents a country in the directory
For example, the following DN represents the user named Jane Doe who works for
the Sales department at Example Corporation, which is located in Mountain View
in the state of California, United States:
CN=Jane Doe, E=jdoe@example.com, OU=Sales, O=Example Corporation,
L=Mountain View, ST=California, C=US
The Certificate Manager uses the components in subject names to construct a DN
that it can use as the base for searching specific directory entries in order to publish
the corresponding certificate information.
For example, suppose the subject name in the certificate is in this form:
CN=Jane Doe, OU=Sales, O=Example Corporation, L=Mountain View,
ST=California, C=US
The Certificate Manager can use some or all of these components (
CN
,
OU
,
O
,
L
,
ST
,
and
C
) to build a DN for searching the directory. When creating a mapper rule, you
can specify the components the server should use to build a DN (that is,
components to match attributes in the directory). You do this by configuring the
dnComps
parameter; for details, see Table 15-10 on page 645.
For example, assume you entered components
CN
,
E
,
OU
,
O
, and
C
as values for the
dnComps
parameter. For locating Jane Doe’s entry in the directory, the Certificate
Manager constructs the following DN by reading the DN attribute values from the
certificate, and uses the DN as the base for searching the directory:
CN=Jane Doe, OU=Sales, O=Example Corporation, C=US
Note the following:
• A subject name does not need to have all of the components that you specify
for the
dnComps
parameter. The server ignores any components that are not
part of the subject name (such as
L
,
ST
, and
E
in this example).
• Unspecified components are not used to build the DN. In the example, if you
did not include the
OU
component, the server would use this DN as the base for
searching the directory:
CN=Jane Doe, O=Example Corporation, C=US