Table of Contents
Advertisement
PTA Plug-In Syntax
Notes:
•
The LDAP URL (ldap|ldaps://authDS/subtree) must be separated from the
optional parameters (maxconns, maxops, timeout, ldver, connlifetime) by a single
space.
•
If you explicitly define any of the optional parameters, you must define all of
them, even if you specify only the default values.
•
You can specify several authenticating directories or subtrees by incrementing
the
"Specifying Multiple Authenticating Directory Servers," on page 465.
The optional parameters are described in the following table in the order in which
they appear in the syntax.
Table 16-1
PTA Plug-In Parameters
Variable
state
extension
ldap|ldaps
authDS
subtree
458
Netscape Directory Server Administrator's Guide • May 2002
nsslapd-pluginarg
Definition
Defines whether the plug-in is enabled or disabled. Acceptable values are on or
off . See "Turning the Plug-in On or Off," on page 460 for more information.
File extension for the plug-in. The extension is always .sl on HP-UX, .so on all
other UNIX platforms, and .dll on Windows NT.
Defines whether SSL is used for communication between the two directory
servers. See "Configuring the Servers to Use a Secure Connection," on page 461
for more information.
The authenticating directory hostname. You can specify the port number of the
directory server by adding a colon and then the port number. For example:
ldap://dirserver.example.com:390/
If you do not specify the port number, the PTA server attempts to connect using:
• Port 389 if ldap:// is specified in the URL.
• Port 636 if ldaps:// is specified in the URL.
See "Specifying the Authenticating Directory Server," on page 462 for more
information.
The pass-through subtree. The PTA directory server passes through bind
requests to the authenticating directory server from all clients whose DN is in
this subtree.
See "Specifying the Pass-Through Subtree," on page 463 for more information.
attribute suffix by 1 each time. This is illustrated in
Advertisement
Table of Contents
