Netscape Certificate Management System 6.2, Руководство администратора

Страница: 468 / 874

Defaults Reference
468 Netscape Certificate Management System Administrator’s Guide • June 2003
If enabled, the policy adds a Subject Key Identifier Extension to an enrollment
request if the extension does not already exist. If the extension exists in the request,
for example from a CRMF request, the default replaces the extension. In case of
agent-approved enrollments, after an agent approves the enrollment request, the
policy accepts any Subject Key Identifier Extension that is already there.
This default has not parameters. If used, this extension will be included in the
certificate with the public key information.
You can define the following constraints with this default:
• Extension Constraint, see “Extension Constraint,” on page 473.
• No Constraints, see “No Constraint,” on page 475.
Subject Name Default
This default populates server-side configurable subject name into the certificate
request. You provide a static subject name that is used as the subject name in the
certificate.
You can define the following constraints with this default:
• Subject Name Constraint, see “Subject Name Constraint,” on page 477.
• No Constraints, see “No Constraint,” on page 475.
Token Supplied Subject Name Default
This default policy that populates subject name based on the attribute values in the
authentication token (AuthToken) object.
This default plugin works with the directory-based authentication manager. The
Directory-Based User Dual-Use Certificate Enrollment certificate profile has the
following input parameters: UID and Password. The directory-based
authentication manager will check if the given UID and password are correct.
Table 10-16 Subject Name Default Configuration Parameters
Parameter Description
Name
Specify the subject name for this certificate.