Configuring The Chaining Policy - Netscape DIRECTORY SERVER 6.01 - ADMINISTRATOR Administrator's Manual

You can create and configure a database link using Directory Server Console or the
command line. The following sections describe the procedures for creating and
maintaining a database link:
•

Configuring the Chaining Policy

• Creating a New Database Link
• Chaining Using SSL
• Maintaining Database Links
• Database Links and Access Control Evaluation
• Advanced Feature: Tuning Database Link Performance
• Advanced Feature: Configuring Cascading Chaining
For information about monitoring the activity of your database links, refer to
"Monitoring Database Link Activity," on page 408.
Configuring the Chaining Policy
These procedures describe configuring how your directory server chains requests
made by client applications to directory servers that contain database links. This
chaining policy applies to all database links you create on your directory server.
Chaining Component Operations
A component is any functional unit in the server that uses internal operations. For
example, plug-ins are considered to be components, as are functions in the
front-end. However, a plug-in may actually be comprised of multiple components
(for example, the ACI plug-in).
Some components send internal LDAP requests to the server, expecting to access
local data only. For such components, you need to control the chaining policy so
that the components can complete their operations successfully. For example,
consider the certificate verification function. If you chain the LDAP request made
by the function to check certificates, it implies that you trust the remote server. If
the remote server is not trusted, then you have a security problem.
By default, all internal operations are not chained. However, you can override this
default by specifying components that you want to chain using the console or the
command line. By default, no components are allowed to chain.
Creating and Maintaining Database Links
Chapter 3 Configuring Directory Databases 91