Protecting Bind Dn And Password; Protecting Root Processes On Unix Systems; Updating The Gateway With Changes To Directory Server Configuration; Http Server Recommendations For Directory Server Gateway - Red Hat DIRECTORY SERVER 7.1 - GATEWAY CUSTOMIZATION Manual

Protecting Bind DN and Password

The gateway configuration files reference files that contain sensitive information, including
the parameter containing the bind DN and bind password used to permit
binddnfile
non-anonymous searching of the directory. The
the gateway configuration directory (
served up over HTTP.

Protecting Root Processes on UNIX Systems

On UNIX systems, it is not advisable to run the gateway from a Red Hat Administration
Server that is also running a server process as
about the configuration of your Directory Servers.
Updating the Gateway with Changes to Directory
Server Configuration
Directory Server Gateway includes a script,
gateway instances with changes to the Directory Server configuration, including changes to
Directory Server port, host, suffix, and root DN (the ability to update the suffix is not
available in the server administration console). The
serverRoot/bin/slapd/admin/bin
Changes made to the Directory Server configuration (
are posted to
updatedsgw,
updated only when the host and port for the gateway match the host and port of the
Directory Server.
NOTE The Directory Server's root DN (the Directory Server's superuser) must
match the value of the gateway's
HTTP Server Recommendations for Directory Server
Gateway
The Red Hat Administration Server is the default HTTP server for the two gateway clients
that are installed with the Directory Server. Both Directory Express and the default gateway
are preconfigured to run under the Administration Server without additional setup.
binddnfile
serverRoot/clients/dsgw
. This may expose sensitive information
root
updatedsgw
directory.
and the relevant gateway files are updated. These files will be
dirmgr
Gateway Installation Planning
should not be stored under
) or in any directory that is
, that can be used to update all
script is stored in the
updatedsgw
) by the Red Hat Console
dse.ldif
parameter.
Chapter 2 Setting Up the Gateway 31