Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 146 / 866

Using the Default Demo
146 Netscape Certificate Management System Installation and Setup Guide • October 2001
You will first try to enroll using 512-bit keys; the enrollment will fail because of the
policy requiring 1024-bit keys. After you submit a new request with a 1024-bit key,
Certificate Management System should authenticate the user information in the
directory and issue the certificate automatically.
To use directory-based authentication to enroll entities:
• Step 1. Enable Directory-Based Authentication
• Step 2. Add a User to the Directory
• Step 3. Enroll with Directory-Based Authentication
You can find out more about authentication in Chapter 15, “Setting Up End-User
Authentication.”
Step 1. Enable Directory-Based Authentication
To enable directory-based authentication for the Certificate Manager:
1.
If the CMS console window is not still open, start Netscape Console again (or
go back to the main window) and open the window for Certificate
Management System.
2.
In the CMS console window, select the Configuration tab, then select
Authentication in the navigation tree.
3.
On the Authentication Instance tab, click Add.
4.
In the Select Authentication Plugin Implementation dialog box, select
UidPwdDirAuth
and click Next.
5.
In the Authentication Instance Editor dialog box, provide the following
information:
Authentication Instance ID:
UserDirEnrollment
dnpattern:
cn=$attr.cn,c=US
ldapStringAttributes: Leave blank
ldapByteAttributes: Leave blank
ldap.ldapconn.host:
<hostname>
ldap.ldapconn.port:
389
ldap.ldapconn.secureConn:
false