DNs in Certificate System
756
Red Hat Certificate System Administrator’s Guide • September 2005
Typically, an LDAP search consists of the following components:
•
The base DN—for example,
O=example.com
,
C=US
, which initiates a subtree search
through all entries below this entry in the directory (in other words, all entries with the
suffix
O=example.com
,
C=US
).
•
The search type, which can be a base search (only the entry specified by the base DN is
searched), a one-level search (only entries one level below the base entry are searched),
or a subtree search (all entries at all levels below the base entry are searched).
•
The search filter, which specifies the search criteria applied to each entry within the
scope of the search.
When Certificate System is configured for LDAP publishing, the search point and search
criteria are determined by the configuration parameter values. In the absence of a base DN
value, Certificate System uses DN components in the certificate’s subject name to construct
the base DN so that it can search the directory in order to publish to or update the
appropriate directory entry.
Typically, when you configure Certificate System for LDAP publishing, you set the base
DN value to
Directory Manager
, so that it can use the publishing directory’s root entry
to start searching; see section “Configuring a Certificate Manager to Publish Certificates
and CRLs” in Chapter 19, “Setting Up LDAP Publishing” of
CS Administrator’s Guide
.
DNs in Certificate System
In Certificate System, the characters allowed in a DN are based on the components
(attributes) as defined in the X.509 standard.
Table I-2 lists the attributes supported by default and their character sets. Explanation of the
character sets are in Table I-3. The set of attributes is extensible.
Table I-2
Allowed characters for value types
Attribute
Value type
Object identifier
CN
Directory String
2.5.4.3
OU
Directory String
2.5.4.11
O
Directory String
2.5.4.10
C
Printable String of
length 2
2.5.4.6
L
Directory String
2.5.4.7
Summary of Contents for CERTIFICATE 7.1 ADMINISTRATOR
Page 1: ...Administrator s Guide Red Hat Certificate System Version7 1 September 2005 ...
Page 22: ...22 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 128: ...Cloning a CA 128 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 368: ...ACL Reference 368 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 460: ...Constraints Reference 460 Red Hat Certificate System Administrator s Guide September 2005 ...
Page 592: ...CRL Extension Reference 592 Red Hat Certificate System Administrator s Guide September 2005 ...
