Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 225 / 554

TPS Configuration Parameters
203
Parameter Description
the DRM, and the client should be a configured
DRM agent.
conn.drm
n
.retryConnect The number of times the TPS tries to reconnect
to the DRM after a connection attempt fails. The
valid values are integers. For example,
3
.
conn.drm
n
.SSLOn Sets whether SSL needs to be turned on for
the connection to the DRM. This value must be
true
.
conn.drm
n
.keepAlive Sets whether to keep the connection to the DRM
alive or terminate it after every operation. The
valid values are
true|false
.
conn.drm1.servlet.GenerateKeyPair The servlet for handling server-side key pair
generation; for example,
/kra/agent/kra/
GenerateKeyPair
.
conn.drm1.servlet.TokenKeyRecovery The servlet for handling smart card key
recovery; for example,
/kra/agent/kra/
TokenKeyRecovery
.
Table 8.4. DRM Connection Settings
Parameter Description
auth.instance.
n
.attributes The LDAP attributes of the user entry to be
retrieved, if attributes are present, such as
auth.instance.0.attributes=mail,cn,uid
.
Once retrieved, these attributes can
be used in other parameter entries
as
$auth.
attr name
$
. For example,
op.enroll.userKey.keyGen.tokenName=
$userid$ [$auth.cn$]
.
auth.instance.
n
.type The authentication type to use. This must be
LDAP_Authentication
.
auth.instance.
n
.libraryName The library to use for LDAP authentication.
Provide the full path to the library. The filename
must be
libldapauth.so
.
auth.instance.
n
.libraryFactory The function name to use for
LDAP authentication. This must be
GetAuthentication
.
auth.instance.
n
.authId Specifies this authentication instance ID to use to
define operations. For example,
ldap1
.
auth.instance.
n
.hostport The LDAP hostname and port number. The
format is
ldap-hostname:ldap-port
.
auth.instance.
n
.SSLOn Sets whether SSL should be turned on. The valid
values are
true|false
.
auth.instance.
n
.retries The number of times authentication is tried
after failure. The valid values are integers. For
example,
1
.