Programming Guides › Programming Guide for Perl › CLI Policy Management Methods › Session Methods › CreateCustomCertMap Method—Creates Custom Certificate Map

CreateCustomCertMap Method—Creates Custom Certificate Map

The CreateCustomCertMap method creates a custom certificate map. The custom certificate map associates user attribute names defined in the certificate's Subject DN with the corresponding user attribute names in the user directory. For authentication to succeed, the values of the mapped user attribute pairs must match. Use the AttributeMap parameter to define the attribute names that are mapped.

Syntax

The CreateCustomCertMap method has the following format:

Netegrity::PolicyMgtSession‑>CreateCustomCertMap(IssuerDN, AttributeMap[, DirectoryType])

Parameters

The CreateCustomCertMap method accepts the following parameters:

IssuerDN (string)

Specifies the certificate issuer's distinguished name.

AttributeMap (string)

Specifies an expression that maps attribute names in the certificate's Subject DN to attribute names in the user directory.

Syntax: UserAttrName1=%{CertAttrName1},UserAttrName2=%{CertAttrName2}, . . . UserAttrName#=%{CertAttrName#}

Example:

Certificate's Subject DN contains: CN=John Smith, UID=JSMITH, OU=Development, O=CompanyA

AttributeMap contains: CN=%{UID}, OU=%{OU}, O=%{O}

Matching user DN in the user directory: CN=JSMITH, OU=Development, O=CompanyA

DirectoryType (int)

(Optional) Specifies the type of user directory specified as the authentication directory:

• Sm_PolicyApi_DirType_LDAP

  Note: This is the default.

• Sm_PolicyApi_DirType_WinNT
• Sm_PolicyApi_DirType_ODBC

Return Value

The CreateCustomCertMap method returns one of the following values:

• PolicyMgtCertMap (object)
• undef if the call is unsuccessful

Remarks

When a certificate map is created, the following flags are set to false, the default value:

• certificate_required_flag
• use_distributionpoints_flag
• verify_signature_flag
• check_certificate_revocation_list_flag
• cache_certificate_revocation_list_entries_flag

For information on changing the value of these flags, see the method PolicyMgtSession‑>CreateExactCertMap.