Netscape Certificate Management System 6.1, Руководство администратора

Страница: 654 / 840

Enabling Publishing
654 Netscape Certificate Management System Administrator’s Guide • February 2003
Directory manager DN. Type the distinguished name (DN) of the directory
entry that has directory manager privileges. The Certificate Manager uses this
DN to access the directory tree and to publish to the directory. The access
control set up for this DN determines whether the Certificate Manager can
perform publishing. Typically, you would want to enter the directory
manager’s DN because it has write permission to the entire directory tree (the
root DN). You could also create another DN that has limited read-write
permissions for only those attributes that the publishing system actually needs
to write.
Password. Type the password for this DN. The Certificate Manager saves this
password in the single sign-on password cache and uses it during startup. (If
you change the password, the server updates the single sign-on password
cache with the new password.)
Client certificate. Select the certificate you want the Certificate Manager to use
for SSL client authentication to the publishing directory. By default, the
Certificate Manager uses its SSL server certificate for this purpose.
LDAP version. Select the version of LDAP protocol appropriate to your
version of Directory Server. If the directory you want the Certificate Manager
to publish to is based on Netscape Directory Server 1.x, select version 2. For
Directory Server versions 3.x and later, select LDAP version 3.
Authentication.
Select the authentication type appropriate to your Directory
Server configuration. The choices are
Basic authentication
and
SSL client
authentication
.
If you configured the Directory Server for basic authentication or for SSL
communication without client authentication, select
Basic authentication
and specify values for the Directory manager DN and password.
If you configured the Directory Server for SSL communication with client
authentication, select
SSL client authentication
, select the
Use SSL
communication
option, and identify the certificate that the Certificate Manager
must use for SSL client authentication to the directory.
4.
To save your changes, click Save.
The server attempts to connect to the specified Directory Server. If the
information you specified is incorrect, the server displays an error message
and you will need to correct the information and save your changes again.
If the changes you made require you to restart the server, you will be
prompted accordingly. In that case, restart the server.