Table of Contents
Advertisement
Creating and Maintaining Database Links
You must also create an ACI on the remote server to allow the plug-in you specify
to perform its operations on the remote server. You create the ACI in the suffix
assigned to the database link.
The following table lists component names, the potential side-effects of allowing
them to chain internal operations, and the permissions they need in the ACI you
create on the remote server:
Components Allowed to Chain
Table 3-2
Component Name
Description
ACI plug-in
This plug-in implements the access control feature.
Operations used to retrieve and update ACI attributes are
not chained because it is not safe to mix local and remote
ACI attributes. However, requests used to retrieve user
entries may be chained. Specify the following value in
nsActiveChainingComponents attribute:
nsActiveChainingComponents: cn=ACI
Plugin,cn=plugins,cn=config
4.0 plug-ins
This component name represents all Directory Server 4.0
plug-ins. The 4.0 plug-ins share the same chaining policy.
Specify the following in the
nsActiveChainingComponents attribute:
nsActiveChainingComponents: cn=old
plugin,cn=plugins,cn=config
Resource limit
This component sets server limits depending on the user
component
bind DN. You can apply resource limits on remote users if
the resource limitation component is allowed to chain. To
chain this component's operations, specify the following:
nsActiveChainingComponents: cn=resource
limits,cn=components,cn=config
Certificate-based
This component is used when the SASL-external bind
authentication
method is used. It retrieves the user certificate from the
checking
database on the remote server. If you allow this component
component
to chain, certificate-based authentication can work with a
database link. To chain this component's operations, specify
the following:
nsActiveChainingComponents:
cn=certificate-based
authentication,cn=components,cn=config
94
Netscape Directory Server Administrator's Guide • May 2002
Permissions
Read, search, and
compare
Depends upon the 4.0
plug-in you are
allowing to chain
Read, search, and
compare
Read, search, and
compare
Advertisement
Table of Contents
