Specifying The Pass-Through Subtree - Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual

Port 636 if
ldaps://
For example, you could set the value of the
"ldap://dirserver.example.com:389/subtree [Parameters]"
For information on the variable components in this sytax, refer to "PTA Plug-In
Parameters," on page 484.
Use the
2.
ldapmodify
Restart the server.
3.
For information on restarting the server, refer to "Starting and Stopping the
Directory Server," on page 35.

Specifying the Pass-Through Subtree

The PTA directory passes through bind requests to the authenticating directory
from all clients whose DN is defined in the pass-through subtree. You specify the
subtree by replacing the subtree parameter in the LDAP URL of the PTA directory.
The pass-through subtree must not exist in the PTA directory. If it does, the PTA
directory attempts to resolve bind requests using its own directory contents and
the binds fail.
To specify the pass-through subtree:
Create an LDIF file that contains the following LDIF update statements:
1.
dn: cn=Pass Through Authentication,cn=plugins,cn=config
cn: Pass Through Authentication
changetype: add
add: nsslapd-pluginarg0
nsslapd-pluginarg0: ldap://authDS/subtree [optional_parameters]
For example, you could set the value of the
"ldap://dirserver.example.com/o=NetscapeRoot [Parameters]"
For information on the variable components in this sytax, refer to "PTA Plug-In
Parameters," on page 484.
Use the
2.
ldapmodify
Restart the server.
3.
For information on restarting the server, refer to "Starting and Stopping the
Directory Server," on page 35.
is specified in the URL.
command to import the LDIF file into the directory.
command to import the LDIF file into the directory.
Chapter 16 Using the Pass-Through Authentication Plug-In
Configuring the PTA Plug-In
nsslapd-pluginarg0
nsslapd-pluginarg0
attribute to:
attribute to:
489