Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 342 / 512

Chapter 14. Publishing
322
Figure 14.15. Enabling Publishing
In the
Destination
section, set the information for the Directory Server instance.
•
Host name.
If the Directory Server is configured for SSL client authenticated communication,
the name must match the
cn
component in the subject DN of the Directory Server's SSL server
certificate.
•
Port number.
•
Directory Manager DN.
This is the distinguished name (DN) of the directory entry that has
Directory Manager privileges. The Certificate Manager uses this DN to access the directory tree
and to publish to the directory. The access control set up for this DN determines whether the
Certificate Manager can perform publishing. It is possible to create another DN that has limited
read-write permissions for only those attributes that the publishing system actually needs to
write.
•
Password.
The Certificate Manager saves this password in the single sign-on password cache
and uses it during startup. If the password is changed, the server updates the single sign-on
password cache with the new password.
•
Client certificate.
This sets the certificate the Certificate Manager uses for SSL client
authentication to the publishing directory. By default, the Certificate Manager uses its SSL
server certificate.
•
LDAP version.
. Select LDAP version 3.
•
Authentication.
The way the Certificate Manager authenticates to the Directory Server. The
choices are
Basic authentication
and
SSL client authentication
.
If the Directory Server is configured for basic authentication or for SSL communication without
client authentication, select
Basic authentication
and specify values for the Directory
manager DN and password.