Netscape DIRECTORY SERVER 6.1 - ADMINISTRATOR Administrator's Manual page 106

Creating and Maintaining Database Links
Providing Bind Credentials
For a request from a client application to be chained to a remote server, you can
provide special bind credentials for the client application. This gives the remote
server the proxied authorization rights needed to chain operations. If you do not
specify bind credentials, the database link binds to the remote server as
anonymous.
Providing bind credentials involves the following steps:
On the remote server, you need to do the following:
1.
a.
b.
On the server containing the database like, you need to do the following:
2.
a.
CAUTION
b.
For example, a client application sends a request to server A. Server A contains a
database link that chains the request to a database on server B.
106 Netscape Directory Server Administrator's Guide • August 2002
Create an administrative user for the database link.
For information on adding entries, see "Creating Directory Entries," on
page 45.
Provide proxy access rights for the administrative user created in step 1 on
the subtree chained to by the database link.
For more information on configuring ACI's, refer to "Managing Access
Control," on page 193.
Use to provide a user DN for the database link in the
ldapmodify
nsMultiplexorBindDN
database_link_name
cn=
entry.
The
nsMultiplexorBindDN
Manager.
Use to provide a user password for the database link in the
ldapmodify
nsMultiplexorCredentials
database_link_name
cn=
entry.
attribute of the
,cn=chaining database,cn=plugins,cn=config
cannot be that of the Directory
attribute of the
,cn=chaining database,cn=plugins,cn=config