Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 167 / 554

Configuring Additional RA Instances
145
cp caDualRAuserCert.cfg caDualRAi2userCert.cfg
c. Edit the new file to suit the new profile:
vi caDualRAi2userCert.cfg
d. Search for "raCertAuth" and change it to "ra2CertAuth"
e. Save and close the file.
4. Change to the CA configuration directory, and edit the
CS.cfg
file
cd /var/lib/rhpki-ca/conf
vi CS.cfg
a. Search for "profile.list" and add ",caDualRA2userCert" to the end of the list. Notice the
comma at the beginning of the new entry.
b. Search for "caDualRAuserCert".
c. Copy the two "class" and "config" lines and paste them immediately after the existing lines.
d. In the two pasted lines, change "caDualRAuserCert" to "caDualRA2userCert".
e. Save and close the file.
5. Add a new URI mapping to allow registering the new RA agent with the new RA group (for
example, "Registration Manager2 Agent"):
a. Change to the CA Web Applications directory, and edit the
web.xml
file:
cd /var/lib/rhpki-ca/webapps/ca/WEB-INF
vi web.xml
b. Search for "caRegisterRaUser"
c. Copy everything between the <servlet> and </servlet> tags, and paste it immediately after
the existing container. Ensure that you include the opening and closing <servlet> tags.
d. Change "caRegisterRaUser" to "caRegisterRa2User".
e. Change "Registration Manager Agents" to "Registration Manager2 Agents".
f. Search for "caRegisterRaUser".
g. Copy everything between the <servlet-mapping> and </servlet-mapping> tags, and paste
it immediately after the existing container. Ensure that you include the opening and closing
<servlet-mapping> tags.
h. Change "caRegisterRaUser" to "caRegisterRa2User".