Netscape Certificate Management System 6.2, Руководство администратора

Страница: 400 / 874

Automated Enrollment
400 Netscape Certificate Management System Administrator’s Guide • June 2003
The right pane shows the Authentication Instance tab listing currently
configured authentication instances.
3.
Click Add.
The Select Authentication Plug-in Implementation window appears.
4.
Select the
PortalEnroll
plug-in module.
5.
Click Next.
The Authentication Instance Editor window appears.
6.
Fill in the following fields in the Authentication Instance Editor window:
Authentication Instance ID. Accept the default instance name, or enter a new
name. If you chose to use a different name, be sure to edit this name in the
enrollment forms.
dnpattern. Specifies a string representing a subject name pattern to formulate
from the directory attributes and entry DN. See “DNs in Certificate
Management System” on page 784.
ldap.ldapconn.host. Specifies the fully-qualified DNS host name of the
authentication directory.
ldap.ldapconn.port. Specifies the TCP/IP port on which the authentication
directory listens to requests from CMS.
ldap.ldapconn.secureConn. Specifies the type—SSL or non-SSL—of the port
on which the authentication directory listens to requests from CMS. Select if
this is an SSL port, deselect if this is a non-SSL port.
ldap.ldapconn.version. Specifies the LDAP protocol version.
2
specifies LDAP
version 2. If your authentication directory is based on Netscape Directory
Server 1.x, choose
2
.
3
specifies LDAP version 3. For Directory Server versions
3.x and later, choose
3
(default).
ldap.ldapauth.bindDN. Specifies the user entry to bind as when adding
entries to the LDAP directory. This user must have permission to create entries
in the directory.
password. Specifies the password associated with the DN specified by the
ldap.ldapauthbindDN
parameter. when you save your changes, the server
stores the password in the single sign-on password cache and uses it for
subsequent start ups.