Enterprise Server 6.1 APIs
Chapter 1 Overview 27
For information about changes to the access control API in Enterprise Server 6.1,
see the comments in the server_root
/plugins/include/nsacl/aclapi.h file.
Certificate-Mapping API
The Certificate-Mapping API consists of data structures and functions used to
manage certificate mapping.
When a user authenticates to a Netscapeserver bysending aclient certificate to the
server, the server uses information in the certificate to search the user directory for
the user’s entry.
You can configure some parts of this processby editing thefile
certmap.conf.This
file specifies:
• How the server searches the directory for the user’s entry
• Whether the server goes through an additional step of verifying that the user’s
certificate matches the certificate presented to the server
For more information about this file, see Chapter 2, “Configuration Files.”
You can also modify this “certificate to directory entry”processprogrammatically.
Netscape servers include a set of API functions (referred to here as the
Certificate-Mapping API functions) that allow you to control this process. You can
write your own functions to customize how certificate subject entries are found in
the directory.
To use this API, you need to have a copy of the Directory SDK. You can download
a copy of this SDK from this site:
http://enterprise.netscape.com/downloads
For More Information
For information about using the certificate-mapping API, see the Certificate-Mapping
Programmer's Guide
.
Komentáře k této Příručce