Deleting Database Links; Database Links And Access Control Evaluation - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Deleting Database Links

To delete a database link:
In the Directory Server Console, select the Configuration tab.
1.
In the left navigation pane, locate the database link you want to delete and
2.
select it.
From the Object menu, select Delete.
3.
You can also right-click the database link and select Delete from the pop-up
menu.
The Deleting Database Link confirmation dialog box is displayed.
Click Yes to confirm that you want to delete the database link.
4.
A progress dialog box appears telling you the steps the Directory Server
completes during the deletion.
Once deleted, the database link no longer appears in the right pane.

Database Links and Access Control Evaluation

When a user binds to a server containing a database link, the database link sends
the user's identity to the remote server. Access controls are always evaluated on
the remote server. Every LDAP operation evaluated on the remote server uses the
original identity of the client application passed via the proxied authorization
control. Operations succeed on the remote server only if the user has the correct
access controls on the subtree contained on the remote server. This means that you
need to add the usual access controls to the remote server with a few restrictions:
• You cannot use all types of access control.
For example, role based or filter based ACIs need access to the user entry.
Because you are accessing the data via database links, only the data in the
proxy control can be verified. Consider designing your directory in a way that
ensures the user entry is located in the same database as the user's data.
• All access controls based on the IP address or DNS domain of the client may
not work, as the original domain of the client is lost during chaining.
The remote server views the client application as being at the same IP address
and in the same DNS domain as the database link.
The following restrictions apply to the ACIs you create to use with database links:
Creating and Maintaining Database Links
Chapter 3 Configuring Directory Databases 115