Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Руководство пользователя

Страница: 202 / 302

Using Client Authentication
202 Managing Servers with Netscape Console • December 2001
To Edit the certmap.conf File
1.
In a text editor, open
Server_Root/shared/config/certmap.conf
.
2.
If necessary, make changes to the default mapping.
For example, you may want to change the value for
DNComps
or
FilterComps
.
If you want to comment out a line, insert a
#
before it.
3.
If desired, create a mapping for a specific CA.
The mapping should take this form:
certmap
mappingName issuerDN
.
For example, to create a mapping named “
Example
CA” which has the issuer
DN
ou=example CA, o=example, c=US
, you would enter the following:
certmap example CA ou=example CA, o=example, c=US
4.
Add property settings for a specific CA’s mapping.
If you are using the
library
and
InitFn
properties, you must specify them
before adding any additional properties.
When adding a property, use this form:
mappingName
:
propertyName value
For example, you could add a
DNComps
value of
o, c
for
Example
CA by
entering the following line:
example CA:DNComps o, c
If you are using the
Library
and
InitFn
properties, a complete mapping
might look like this:
certmap Example CA ou=example CA, o=example, c=US
Example CA:Library /usr/netscape/server/userdb/plugin.so
Example CA:InitFn plugin_init_dn
Example CA:DNComps o, c
Example CA:FilterComps e, uid
Example CA:VerifyCert on
Example CA:CmapLdapAttr certSubjectDN
5.
Save the
certmap.conf
file.