NISAuth Plug-in ModuleChapter 1 Authentication Plug-in Modules 39m If the end user does not have a valid entry in the NIS server, the CertificateManager or Registration Manager rejects the request, logs an errormessage, and sends a rejection notification to the user.m If the end user has a valid entry in the NIS server, the Certificate Manageror Registration Manager checks to see if any LDAP directory has beenconfigured for retrieving attributes for constructing the certificate subjectname. If a directory is specified, the server checks it for the user’s entry,retrieves all the information required to construct the subject name, andadds the subject name to the certificate request. If a directory isunspecified, the server uses the NIS user’s name, user ID, and extendedDN (if specified) for the subject name.If, for some reason, the directory to which the server binds for retrieving userattributes is unavailable, the server writes the appropriate LDAP error code tothe log. When checking the log for troubleshooting any authentication failures,if you see a log entry with an LDAP error code, check the corresponding errorcode at this URL: http://help.netscape.com/kb/server/970303-9.htmlA sample log entry with an LDAP error code is shown below:30/Dec/1999:18:40:25 -0700] conn=0 op=7 RESULT err=32 tag=101nentries=0 etime=0]3. Next, the server subjects the certificate request to policy processing. For details,see Chapter 18, “Setting Up Policies” of CMS Installation and Setup Guide.m If the request fails any of the configured policies, the server rejects therequest, logs an error message, and sends a rejection notification to the enduser.m If the request passes all the configured policies, the server issues the enduser a certificate.The end user gets the certificate, which, if the server is configured to do so,is delivered to the email address specified in the request or in the directory;for information on configuring a Certificate Manager or RegistrationManager to send automated notifications, see section “Notifications ofCertificate Issuance to End Entities” in Chapter 16, “Setting Up AutomatedNotifications” of CMS Installation and Setup Guide.Configuration Parameters of NISAuthIn the configuration file, the NISAuth module is identified asauths.impl.NISAuth.class=com.netscape.certsrv.authentication.NISAuth.
