Chapter 17. Configuring cert-user-map.xml

Table of Contents

17.1. Introduction
17.2. XML Schema/XML Tree
17.3. Element Reference
17.4. Example File

This chapter explains the contents of cert-user-map.xml which defines the mapping information between users and certificates.

XML references are configured in the following format.

  1. XML Schema/XML Tree: Summarizes all the tags of XML configuration file. Each node is defined in the following format.

    1. Tag reference enables quick search for tags. Each tag is attached with index numbers ( ex: (11) ). Tags are explained with this number in tag reference.

    2. The XML tag name defined in the XML schema is expressed in the format of <tag name>.

    3. Tags are set with cardinality defined in XML schema.

      “?” is for 0 or 1 element, “+” is for 1 or more elements, “*” is for 0 or more elements, (no symbol) is for exactly one element

    4. Several tags have "P" character, meaning that they are the tags related to performance. These tags are used to tune the setting.

  2. Element Reference: Explains XML tags in the tree.

    1. Dynamic: Allowed to change the configuration dynamically.

    2. Non-Dynamic: Not allowed to change the configuration dynamically. This is expressed only for the special case to comment out.

    3. Description: A short description for tags.

    4. Value Description: The value and type.

    5. Value Type: Data type of the value. (ex: String)

    6. Value Type Description: Description for the data type of the value.

    7. Default Value: The value to be used by default when the XML is not used.

    8. Defined Value: The default value.

    9. Example: The XML tag example.

    10. Performance Recommendation: The value recommended to improve performance.

    11. Child Elements:The tags contained in its own tag element.

(1) <cert-user-map>
Description Defines mapping information for a user and a certificate attribute.
Value Type CertUserMapType
Child Elements

(3) cert-user

(2) < cert-user-map > <cert-user>
Description Maps a user to a certificate.
Value Type CertUserType
Child Elements

(4) username

(5) cert

(3) < cert-user-map >< cert-user > <username>
Description Name of the user to be mapped to a certificate in the keystore. The user name is the primary identifier and must be unique.
Value Type token

(4) < cert-user-map >< cert-user > <cert>
Description Information about the certificate in the keystore.
Value Type CertType
Child Elements

(6) subjectDN

(7) SKI

(8) issuer

(9) serialNo

(10) alias

(5) < cert-user-map >< cert-user >< cert > <subjectDN>
Description Subject DN for a certificate in the keystore.
Value Type token

(6) < cert-user-map >< cert-user >< cert > <SKI>
Description SKI for the certificate in the keystore.
Value Type token

(7) < cert-user-map >< cert-user >< cert > <issuer>
Description Issuer for the certificate in the keystore.
Value Type token

(8) < cert-user-map >< cert-user >< cert > <serialNo>
Description Serial number of the certificate in the keystore.
Value Type token

(9) < cert-user-map >< cert-user >< cert > <alias>
Description Alias for the certificate in the keystore.
Value Type token