Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора, Страница: 273 / 512

Populating Certificates with Directory Attributes
253
Identifier: Subject Alternative Name - 2.5.29.17
Critical: no
Value:
RFC822Name: jsmith@example.com
There are many attributes which can be automatically inserted into certificates by being set as a token
in the policy set. These are listed in
Table 12.2, “Tokens Used to Populate Certificates”
.
Policy Set Token Description
$request.requestType$ This specifies the type of request, such as
enrollment.
$request.cert_request$ This is the base-64 certificate request.
$request.profile$
$request.cert_request_type$
This is the type of request, such as CRMF or
PKCS #10.
$request.auth_token.userDN$ This inserts the user DN of the user who
requested the certificate.
$request.authenticatedName$ This inserts the user DN of the user who
requested the certificate.
$request.profileRemoteAddr$
$request.auth_token.cn[0]$
This inserts the LDAP common name (
cn
)
attribute of the suer who requested the
certificate.
$request.auth_token.uid$ This inserts the LDAP user ID (
uid
) attribute of
the user who requested the certificate.
$request.bodyPartId$
$request.profileApprovedBy$
This inserts the name of the Certificate System
agent who approved the certificate.
$request.auth_token.authMgrImplName$ This inserts the type of authentication plug-in
which authenticated the user.
$request.profileId$ This inserts the name of the profile enrollment
form to which the request was submitted.
$request.profileRemoteHost$
$request.requestId$
This inserts the request ID number.
$request.requestVersion$ This inserts the Certificate System version
number of the CA which issued the certificate.
$request.dbStatus$
$request.auth_token.tokenCertSubject$
This inserts the certificate subject name.
$request.requestStatus$
$request.auth_token.authMgrInstName$
This inserts the name of the authentication plug-
in instance which authenticated the user.
$request.auth_token.mail[0]$ This inserts the value of the LDAP email
(
mail
) attribute of the user who requested the
certificate.