Configuring Cascading Chaining From The Command Line - Netscape DIRECTORY SERVER 6.02 - ADMINISTRATOR Administrator's Manual

Table of Contents

Advertisement

Creating and Maintaining Database Links

Configuring Cascading Chaining From the Command Line

Configuring a cascade of database links through the command line involves the
following steps:
Pointing one database link to the URL of the server containing the intermediate
database link.
Configuring the intermediate database link or links (in the example, server
two) to transmit the Proxy Authorization Control.
Creating a proxy administrative user ACI on all intermediate database links.
To do so, you will need to create a database on each server that contains an
intermediate database link.
Enabling local ACI evaluation on all intermediate database links.
Creating client ACIs on all intermediate database links and the final
destination database.
Pointing to Another Database Link
To create a cascading chain, the
must contain the URL of the server containing another database link. For example,
suppose the database link on the server called
link on the server called
database_link_name
cn=
the database link on server one would contain the following:
nsFarmServerURL: ldap://africa.example.com:389
Transmitting the Proxy Authorization Control
By default, a database link does not transmit the Proxy Authorization Control.
However, when one database link contacts another, this control is used to transmit
information needed by the final destination server. The intermediate database link
needs to transmit this control. To configure the database link to transmit the proxy
authorization control, add the following to the
database,cn=plugins,cn=config
nsTransmittedControls: 2.16.840.1.113730.3.4.12
The OID value represents the Proxy Authorization Control. For more information
about chaining LDAP controls, refer to "Chaining LDAP Controls," on page 97.
122
Netscape Directory Server Administrator's Guide • May 2002
nsFarmServerURL
africa.example.com
,cn=chaining database, cn=plugins,cn=config
entry of the intermediate database link:
attribute of one database link
points to a database
example1.com
. The
cn=config,cn=chaining
entry of

Advertisement

Table of Contents
loading

This manual is also suitable for:

Directory server 6.02

Table of Contents