Programming Guides › Programming Guide for Perl › CLI Policy Management Methods › Session Methods › CreateExactCertMap Method—Creates Certificate Map Matching User Directory Attributes

CreateExactCertMap Method—Creates Certificate Map Matching User Directory Attributes

The CreateExactCertMap method creates a certificate map object whose Subject DN attributes match the corresponding user directory attributes exactly. When the certificate map object is created, the following flags are set to FALSE:

• Certificate required

  Note: To change the value of this flag, call the method PolicyMgtCertMap‑>CertRequired.

• Use distribution points

  Note: To change the value of this flag, call the method PolicyMgtCertMap‑>UseDistributionPoints.

• Verify signature

  Note: To change the value of this flag, call the method PolicyMgtCertMap‑>VerifySignature.

• Check Certificate Revocation List (CRL)

  Note: To change the value of this flag, call the method PolicyMgtCertMap‑>EnableCRL.

• Cache CRL entries

  Note: To change the value of this flag, call the method PolicyMgtCertMap‑>CacheCRL.

Syntax

The CreateExactCertMap method has the following format:

Netegrity::PolicyMgtSession‑>CreateExactCertMap(IssuerDN[, DirectoryType])

Parameters

The CreateExactCertMap method accepts the following parameters:

IssuerDN (string)

Specifies the distinguished name of the certificate issuer.

DirectoryType (int)

(Optional) Specifies one of the following user directory types used for authentication:

• Sm_PolicyApi_DirType_LDAP (default)
• Sm_PolicyApi_DirType_WinNT
• Sm_PolicyApi_DirType_ODBC

Return Value

The CreateExactCertMap method returns one of the following values:

• PolicyMgtCertMap (object)
• undef if the call is unsuccessful