Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 609 / 866

Publishing of Certificates to a Directory
Chapter 19 Setting Up LDAP Publishing 609
The Certificate Manager cannot update the directory in the following cases:
• If an end-entity entry is not present or if an entry cannot be found to publish
the certificate.
• If the directory’s schema doesn’t include the appropriate attributes. To
configure the directory for LDAP publishing, see “Step 2. Set Up the Directory
for Publishing” on page 618. Note that the Certificate Manager publishes to the
userCertificate;binary
attribute, which is an LDAP v3 standard. Unless
you are using a non-standards compliant directory, this situation shouldn’t
arise.
• When the directory is unreachable because maintenance work is being
performed, or because of network or system failures.
Note that the Certificate Manager’s LDAP publishing action happens as a separate
transaction from any certificate operation (such as issuance); the operation of a
certificate is not affected by whether it was successfully published or not.
Directory Update Process
As indicated in Table 19-1 on page 608, when a Certificate Manager is requested to
issue a certificate, update certificate information, or publish a CRL, it automatically
updates the corresponding entry in the configured directory with relevant
information. To locate the correct directory entry, the Certificate Manager relies on
object-mapping rules, which can be defined using the mapper modules. Once an
entry is located in the directory, to publish the object to the correct attribute of the
located entry, the Certificate Manager relies on object-publishing rules, which can
be defined with the help of publisher modules. For details about mapper and
publisher modules, see Chapter 5, “Mapper Plug-in Modules” and Chapter 6,
“Publisher Plug-in Modules” of CMS Plug-ins Guide.
Similarly, when you revoke a certificate, the Certificate Manager uses the object
mapping and publishing rules to locate and delete the corresponding certificate
from the directory.
For step-by-step instructions to configure a Certificate Manager to publish to an
LDAP directory, see “Configuring a Certificate Manager to Publish Certificates and
CRLs” on page 615.