Mapping Bind Forwarding - Sun Microsystems Sun Java SystemDirectory Server Migration Giude

Mapping the Groups Configuration
TABLE 6–5
Directory Proxy Server 5 Network Group Attribute
ids-proxy-con-tcp-no-delay
ids-proxy-con-allow-multi-ldapv2–bind
ids-proxy-con-reverse-dns-lookup
ids-proxy-con-timeout

Mapping Bind Forwarding

Directory Proxy Server 5 bind forwarding is used to determine whether to pass a bind request
on to an LDAP server or to reject the bind request and close the client's connection. Directory
Proxy Server 6.0 forwards either all bind requests or no bind requests. However, by setting the
allowed-auth-methods connection handler property, successful binds can be classified into
connection handlers, according to the authentication criteria. Directory Proxy Server 6.0 can be
configured to reject all requests from a specific connection handler, providing the same
functionality as Directory Proxy Server 5 bind forwarding.
In Iplanet Directory Access Router 5.0 (IDAR) these configuration attributes are stored under
ids-proxy-con-Name=group-name,ou=groups,ou=pd2,ou=iDAR,o=services. In Directory
Proxy Server 5.2, these configuration attributes are stored under
ou=groups,cn=user-defined-name,ou=dar-config,o=NetscapeRoot
The following table maps the Directory Proxy Server 5 bind forwarding attributes to the
corresponding Directory Proxy Server 6 connection handler property settings.
TABLE 6–6
Connection Handler Property Settings
Directory Proxy Server 5 Attribute
ids-proxy-con-bind-name
ids-proxy-con-permit-auth-none
ids-proxy-con-permit-auth-simple
90 Sun Java System Directory Server Enterprise Edition 6.0 Migration Guide • March 2007
Mapping Between Version 5 Network Group Attributes and 6.0 Properties
Mapping of Directory Proxy Server 5 Bind Forwarding Attributes to Directory Proxy Server 6
Sun Confidential: Registered
Directory Proxy Server 6.0 Property
Set this as a property for a specific listener port by using
the following command:
$ dpconf set-ldap-listener-prop
use-tcp-no-delay:true
No equivalent
No equivalent
This functionality exists but with less granularity than in
Directory Proxy Server 5. Set this limit as a property for a
specific listener port by using the following command:
$ dpconf set-ldap-listener-prop
connection-idle-timeout:value
Directory Proxy Server 6 Property
No equivalent
allowed-auth-methods:anonymous
allowed-auth-methods:simple
(Continued)