System information

## This line switches setpin into setup mode.

## Please do not change it.

setup=yes

3. Run setpin, and set the option file to setpin.conf.

setpin optfile=/usr/lib/rhpki/native-tools/setpin.conf

1.2. Syntax

The setpin has the following syntax:

setpin host=host_name [port=port_number] binddn=user_id

[bindpw=bind_password] filter="LDAP_search_filter" [basedn=LDAP_base_DN]

[length=PIN_length | minlength=minimum_PIN_length |

maxlength=maximum_PIN_length]

[gen=character_type] [case=upperonly] [hash=algorithm]

[saltattribute=LDAP_attribute_to_use_for_salt_creation] [input=file_name]

[output=file_name] [write] [clobber] [testpingen=count]

[debug] [optfile=file_name] [setup [pinmanager=pinmanager_user]

[pinmanagerpwd=pinmanager_password]]

Option Description

host Required. Specifies the LDAP directory to

which to connect.

port Specifies the LDAP directory port to which to

bind. The default port number is the default

LDAP port, 389.

binddn Required. Specifies the user as whom the PIN

Generator binds to the LDAP directory. This

user account must have read/write access to

the directory.

bindpw Gives the password for the user ID set in the

binddn option. If the bind password is not

given at the command line, the tool prompts

for it.

filter Required. Sets the search filter for those DNs

in the directory for which the tool should

generate PINs.

basedn Specifies the base DN under which to search

for DNs. If this argument is not specified, the

Chapter 6. PIN Generator