LdapCaSimpleMap Plug-in Module256 Netscape Certificate Management System Plug-ins Guide • October 2001LdapCaCertMap MapperThe mapper named LdapCaCertMap is an instance of the LdapCaSimpleMapmodule. The Certificate Manager automatically creates this mapper duringinstallation.You can use this mapper for creating an entry for the CA in the directory and formapping the CA certificate to the CA’s entry in the directory.By default, the mapper is configured to create an entry for the CA in the directoryand the default DN pattern for locating the CA’s entry is as follows:UID=$subj.cn,OU=people,O=$subj.odnPattern Specifies the DN pattern the Certificate Manager should use to construct the DN inorder to search for the CA’s entry in the publishing directory. The value ofdnPattern can be a list of AVAs separated by commas. An AVA can be a variable,such as CN=$subj.cn, that the Certificate Manager can derive from the certificatesubject name, or a constant, such as O=Siroe Corporation.Note that if your CA certificate does not have the CN component in its subject name,be sure to adjust the CA certificate mapping DN pattern to reflect the DN of the entryin the directory where the CA certificate is to be published. For example, if your CAcertificate subject DN is O=Siroe Corporation and the CA’s entry in thedirectory is cn=Certificate Authority, o=Siroe Corporation, the patternshould look like this: cn=Certificate Authority, o=$subj.o(This rule applies to other mappers as well.)Permissible values: A valid pattern that will enable the Certificate Manager toconstruct the DN for the CA’s entry.Example 1: uid=CertMgr, o=Siroe CorporationExample 2: CN=$subj.cn,OU=$subj.ou,O=$subj.o,C=USExample 3: uid=$req.HTTP_PARAMS.uid,E=$ext.SubjectAlternativeName.RFC822Name,ou=$subj.ouIn the above examples, $req means take the attribute from the certificate request,$subj means take the attribute from the certificate subject name, and $ext meanstake the attribute from the certificate extension.Table 5-2 Description of parameters defined in the LdapCaSimpleMap module (Continued)Parameter Description
