Netscape DIRECTORY SERVER 6.01 - ADMINISTRATOR Administrator's Manual page 93

Components Allowed to Chain (Continued)
Table 3-2
Component Name Description
Referential This plug-in ensures that updates made to attributes
integrity plug-in containing DNs are propagated to all entries that contain
pointers to the attribute. For example, if you delete an entry
that is a member of a group, the entry is automatically
removed from the group. Using this plug-in with chaining
helps simplify the management of static groups when the
group members are remote to the static group definition.
To chain this component's operations, specify the following:
nsActiveChainingComponents:
cn=referential integrity
postoperation,cn=plugins,cn=config
UID uniqueness This plug-in checks that all the values for a specified uid
plug-in attribute are unique (no duplicates). If you allow this
plug-in to chain, it confirms that the uid attribute values are
unique even on attributes changed through a database link.
To chain this component's operations, specify the following:
nsActiveChainingComponents: cn=uid
uniqueness,cn=plugins,cn=config
NOTE
Once you have modified the component you allow to chain, you must restart the
server in order for the modification to take affect.
The following sections describe how to specify components you want to allow to
chain using the console and from the command line.
Chaining Component Operations Using the Console
On the Directory Server Console, select the Configuration tab.
1.
You cannot chain the following components:
• Roles plug-in
• Password policy component
• Replication plug-ins
For further information on the limitations surrounding ACIs and
chaining see "ACI Limitations" on page 190.
Creating and Maintaining Database Links
Permissions
Read, write, search, and
compare
Read, search, and
compare
Chapter 3 Configuring Directory Databases 93