Re: Basic Cert-2-Directory mapping question

[Richard Levitte at Celo <richard.levitte@xxxxxxxxxx>]

If I understand things correctly, you need support for one-to-many of
certificate-to-direntry, because

	CN=James Adrian Smith + SN=343434

would map both to

	/CN=James Adrian Smith

and

	/SN=343434

If I'm incorrect, I'll gladly be corrected.

Anders Rundgren wrote:
> 
> Basic question from an RDBMS-hack.
> 
> Assume you have a directory structure like
> 
>    /O=Internet/DC=COM/DC=Acme/CN=Users/CN=James A Smith
> 
> Now you have a [probably TTP-issued] certificate for this person with a DN
> 
>   CN=James Adrian Smith + SN=343434
> 
> How do you map/match such a "alien" certificate in an efficient and easy-to-adminster way
> using directory technology?  The solution should support many-to-one mappings
> of certificates-to-individuals.  To make it simple, ignore the issuer part.

-- 
Richard Levitte			!!! New cell phone number !!!
richard.levitte@xxxxxxxxxx

/* You might enjoy viewing the complete vCard */

begin:vcard 
n:Levitte;Richard
tel;cell:+46-733-72 8811
tel;work:+46-8-58 72 8811
x-mozilla-html:FALSE
org:<A HREF="http://www.celocom.com";>Celo Communications</A>
version:2.1
email;internet:richard.levitte@xxxxxxxxxx
title:Software Artist
adr;quoted-printable:;;Sveav=E4gen 145, 5tr=0D=0AStockholm;;;;SWEDEN
note;quoted-printable:<br>=0D=0A<table border=3D0>=0D=0A<tr>=0D=0A  <td bgcolor=3D"#00ffff">c=EAlo, =E2vi, =E2tum, (latin) 1,v.a.=0D=0A      to hide something from one, to keep secret, to conceal.=0D=0A  </td>=0D=0A</tr>=0D=0A</table>=0D=0A<br>=0D=0A<table border=3D3>=0D=0A<tr>=0D=0A <td>=0D=0A  <table>=0D=0A  <tr>=0D=0A   <td valign=3Dtop>o/~</td>=0D=0A   <td><font size=3D-1>Coding, coding, coding</font><br>=0D=0A          Keep'em hackers coding<br>=0D=0A          <font size=3D+1>And When They're Done Coding</font><br>=0D=0A          <font size=3D7>COMPIIIIIIILE!!</font></td>=0D=0A  </tr>=0D=0A  </table>=0D=0A </td>=0D=0A</tr>=0D=0A</table>
x-mozilla-cpt:;0
fn:Richard Levitte
end:vcard