Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 139 / 532

Chapter 5, Working with Server Security 139
Using Client Certificates
•
Library
is a property whose value is a pathname to a shared library or
DLL. You only need to use this property if you create your own properties
using the certificate API. For more information, see the
NSAPI Programmer’s
Guide for Enterprise 4.0.
•
InitFn
is a property whose value is the name of an init function from a
custom library. You only need to use this property if you create your own
properties using the certificate API.
For more information on these properties, refer to the examples described in
“Example Mappings,” on page 139
Creating Custom Properties
You can use the client certificate API to create your own properties. For
information on programming and using the client certificate API, see
NSAPI
Programmer’s Guide for Enterprise Server 4.0 .
Once you have a custom mapping, you reference the mapping as follows:
<name> :
library
<path_to_shared_library>
<name> :
InitFn
<name_of_init_function>
For example:
certmap default1 o=Netscape Communications, c=US
default1:library /usr/netscape/enterprise/userdb/
plugin.so
default1:InitFn plugin_init_fn
default1:DNComps ou o c
default1:FilterComps l
default1:verifycert on
Example Mappings
The
certmap.conf
file should have at least one entry. The following
examples illustrate the different ways you can use the
certmap.conf
file.
Example #1
This example represents a
certmap.conf
file with only one “default”
mapping: