You need not have an entry in your directory for the DN.
也不需要在目录中为这个DN 指定一个条目。
You would have to use a valid user DN in your certificate for that to work.
您必须在证书中使用一个有效的用户DN以使证书正常工作。
For example, you may use the LTPA token between two hops, then use another token, such as a digital signature, where the DN of the user is specified in both user repositories.
例如，您可能在两个跃点之间使用ltpa令牌，然后再使用其他的令牌，如数字签名，其中在这两个用户存储库中都指定了用户的DN。
Use of a CRL is still mandatory to handle compromised certificates, but it is of very limited use in removing a DN from the match pool.
虽然仍需要强制使用CRL来处理被破坏的证书，但是在用于从匹配池中删除DN 时会受到很大限制。
This is not required; the base name in the federated repository can be set to a different name than the actual repository root DN.
这不是必需的，可以将联合存储库中的基本名称设置为与实际存储库根专有名称不同的名称。
Second, if client certificates are to be used, the DN in the client certificate may have to map to a real user in a user registry used by the server.
第二个问题是，如果使用客户机证书，客户机证书中的DN可能必须映射到服务器使用的用户注册表中的一个真正的用户。
That DN is still perfectly viable in every context, including the ca that revoked it; it is only the DN and fingerprint together (this one certificate) that is invalid.
该DN在每个上下文中仍然可行，其中包括撤销它的ca；只有DN和指纹(此证书)是无效的。
Typically, an authorization check involves checking the complete DN of a user, which is unique in the LDAP server and is case sensitive.
通常，一个验证检查包括检查一个用户的完整dn，检查是否在LDAP服务器中是唯一的，以及检查是否是区分大小写的。
As you move down the tree of nodes, the DN of each parent nodes is included in the DN of its child nodes.
当向下移动节点树时，每个父节点的DN被包含在其子节点的DN中。
Note the DN of the LDAP users: it's a concatenation of the actual DN of the user in the LDAP and the base entry that you defined to the federated repository.
注意LDAP用户的专有名称：它是ldap中用户的实际专有名称的串联和联合存储库定义的基本项。
An exit is the only option that gives any assurance of blocking a DN in this scenario.
在此情况下，出口是保证阻止DN的唯一选项。
The group base DN should be present in the LDAP DIT before configuring the client.
在配置客户端之前，该组的基本DN应该出现在LDAPDIT中。
First, notice the DN of the root node in Figure 2.
首先，注意图2中根节点的DN。
If you try to create the DN of the special user using any of the DN patterns configured in Listing 5, you will find that none of the patterns is suitable to create the DN of the special user.
如果试图使用清单5中配置的任何一种DN模式创建特定用户的DN，您会发现没有一种DN模式可用。
The SSLPEER value should be designed to match either a single unique DN or to match generically, based on values in the DN, such as common name, company name, and cluster name.
需要基于DN中的值(如通用名、公司名和集群名)将sslpeer值设计为匹配单个唯一DN或者进行一般匹配。
The base DN of a configured LDAP server must be used in the ldif file.
在ldif文件中，必须使用已配置的LDAP服务器的基本DN。
The TSGA administrator must implement name mapping, adding the LDAP DN as a secondary value of the FullName field in the Domino person document.
TSGA管理员必须实现名称映射，在Domino 的个人文档中，添加LDAPDN作为FullName 域的辅助值。
Although you can use several components to define a DN, I use only three of them in this article: ou, uid, and cn. Each one has a different purpose.
虽然可以用多个组件定义一个DN，但我在本文中只使用三个组件：ou、uid和cn。
Note that I entered the default username in the user DN field and the default password in the password field.
请注意，我在Userdn字段中输入了默认用户名，在Password字段中输入了默认口令。
If the DN created by the first DN pattern does not exist in the directory, the authenticator bean tries the next DN pattern configured in the list.
如果目录中并没有第一个DN模式创建的DN,authenticatorbean尝试使用列表中配置的第二个DN模式。
The RDN of a child entry (for example, ou=users) is prepended to its parent's DN (for example, ou=system) with a comma in between to form the DN of the child entry (for example, ou=users,ou=system).
子条目（例如ou=users）的RDN 前面要加上双亲的DN （例如 ou=system），中间用逗号分隔，从而构成子条目的 DN（例如 ou=users,ou=system）。
Querying for all will result in all of the accounts from every base DN being returned.
如果查询所有的基本DN，那么将返回每个基本dn的所有帐户。
Find the appropriate base DN definition in the file and add the additional base DNs desired.
在文件中找到合适的基本dn定义，并添加所需的附加基本dn。
The DN and password are sent to the LDAP server in plain text.
DN和密码都以正文文本的格式发送给LDAP服务器。
With a trust store consisting of a single trusted ca and nothing more, the CRL approaches an equivalent per-DN revocation capability in which revocation of the certificate effectively revokes access.
使用除包含单个受信任存储CA之外没有其他任何内容的信任存储区，CRL提供一个等效的每DN撤销功能，撤销证书将有效撤销访问权。
RFC 2253 (see Resources) provides the syntax to write a DN in the form of a string.
RFC 2253(请参阅参考资料)提供了以字符串形式编写DN的语法。
In several scenarios, such as a DN that exceeds the SSLPEER length or the need for wild-card matching, a channel exit is the only solution.
在几种情形中(如dn超出了SSLPEER长度或需要通配符匹配)，通道出口是唯一的解决方案。
LDAP USES the concept of a distinguished name (DN) to identify the particular nodes in an LDAP tree.
LDAP使用专有名称(DN)的概念来识别ldap树上特定的节点。
You'll learn about the mechanism LDAP USES to ensure that each DN is unique later in the article.
在本文后面将了解到LDAP保证每个dn惟一的机制。
Be aware that the -dn entry in the command defines the root for the distinguished names of the objects to be stored in the database repository.
请注意，命令中的- dn项定义要存储在数据库存储库中的对象的专有名称的根。
应用推荐