The Subject DN To User Attribute Certificate Mapper maps client certificates to user entries by looking for the certificate subject DN in a specified attribute of user entries.
The Subject DN To User Attribute Certificate Mapper object inherits from Certificate Mapper.
Use the --advanced option to access advanced properties.
| Synopsis | Indicates whether the Certificate Mapper is enabled. |
| Default Value | None |
| Allowed Values | true false |
| Multi-valued | No |
| Required | Yes |
| Admin Action Required | None |
| Advanced | No |
| Read-Only | No |
| Synopsis | Specifies the name or OID of the attribute whose value should exactly match the certificate subject DN. |
| Default Value | None |
| Allowed Values | The name of an attribute type defined in the LDAP schema. |
| Multi-valued | No |
| Required | Yes |
| Admin Action Required | None |
| Advanced | No |
| Read-Only | No |
| Synopsis | Specifies the base DNs that should be used when performing searches to map the client certificate to a user entry. |
| Default Value | The server will perform the search in all public naming contexts. |
| Allowed Values | A valid DN. |
| Multi-valued | Yes |
| Required | No |
| Admin Action Required | None |
| Advanced | No |
| Read-Only | No |
| Synopsis | Specifies the fully-qualified name of the Java class that provides the Subject DN To User Attribute Certificate Mapper implementation. |
| Default Value | org.opends.server.extensions.SubjectDNToUserAttributeCertificateMapper |
| Allowed Values | A Java class that extends or implements: org.opends.server.api.CertificateMapper |
| Multi-valued | No |
| Required | Yes |
| Admin Action Required | The object must be disabled and re-enabled for changes to take effect. |
| Advanced | Yes |
| Read-Only | No |