When create-ldap-entry is false, this setting controls whether the Entrust Certificate Authority creates an LDAP entry for the user.

When choosing an option that instructs Entrust Certificate Authority to create the directory entry, you must set the ca-variable-<i> variables.

Value

Action

DO_OP_FAIL_IF_NOT_NEEDED

Perform the repository operation when needed, and fail if not needed.

DO_OP_SUCCEED_IF_NOT_NEEDED

Perform the repository operation when needed, and return success if not needed.

NO_OP

Omit the repository operation and do not check if the operation is needed.

NO_OP_FAIL_IF_NEEDED

Omit the repository operation, but fail if the operation is needed.

In the CA profile, certificate types as vpn_nodir  include the following master.certspec  advanced setting under [Extension Definitions].

noUserInDirectory=1

Mandatory: No. This optional parameter defaults to NO_OP