Introduction to Policy
Chapter
18
Setting Up Policies
567
Note that to define a new attribute in any of the HTML forms, all you need to do is
to add the following line to the corresponding HTML form:
<input type="HIDDEN" name="attribute_name" value="attribute_value">
Assuming that the new attribute you define for the organizational unit is
orgunit
,
the line you would add to the enrollment form would be:
<input type="HIDDEN" name="orgunit" value="Sales">
To add this line to an enrollment form, you would:
1.
Open the corresponding HTML file in a text editor.
2.
Locate the section that lists the HTTP input variables.
3.
Add this line:
<input type="HIDDEN" name="orgunit" value="Sales">
4.
Save your changes and close the file.
For the server to use the attribute (to distinguish enrollment requests from users in
the Sales unit versus those in the Manufacturing unit) to issue certificates with the
appropriate validity periods, you must formulate your predicate expression with
the attribute you added. Here’s how you do this:
1.
Create a new instance of the
ValidityConstraints
policy plug-in
implementation.
2.
Enter the appropriate values for all the attributes.
Assume you named the instance
ValidityRule1
, set the minimum validity
period to 10 days, set the maximum validity period to 180 days, defined the
predicate expression as
HTTP_PARAMS.certType==client AND
HTTP_PARAMS.orgunit==Sales
. (This expression specifies that the policy be
applied to only client certificate requests from users in the organizational unit
named Sales.)
A sample of the resulting configuration entries in the CMS configuration file
would be as follows:
ca.Policy.rule.ValidityRule1.enable=true
ca.Policy.rule.ValidityRule1.implName=ValidityConstraints
ca.Policy.rule.ValidityRule1.maxValidity=180
ca.Policy.rule.ValidityRule1.minValidity=10
ca.Policy.rule.ValidityRule1.predicate=HTTP_PARAMS.certType==
client AND HTTP_PARAMS.orgunit==Sales
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
