Netscape DIRECTORY SERVER 6.2 - ADMINISTRATOR Administrator's Manual page 99

Table 3-2 Components Allowed to Chain (Continued)
Component Name Description
4.0 plug-ins This component name represents all Directory Server 4.0
plug-ins. The 4.0 plug-ins share the same chaining policy.
Specify the following in the
nsActiveChainingComponents attribute:
nsActiveChainingComponents: cn=old
plugin,cn=plugins,cn=config
Resource limit This component sets server limits depending on the user
component bind DN. You can apply resource limits on remote users if
the resource limitation component is allowed to chain. To
chain this component's operations, specify the following:
nsActiveChainingComponents: cn=resource
limits,cn=components,cn=config
Certificate-based This component is used when the SASL-external bind
authentication method is used. It retrieves the user certificate from the
checking database on the remote server. If you allow this component
component to chain, certificate-based authentication can work with a
database link. To chain this component's operations, specify
the following:
nsActiveChainingComponents:
cn=certificate-based
authentication,cn=components,cn=config
Referential This plug-in ensures that updates made to attributes
integrity plug-in containing DNs are propagated to all entries that contain
pointers to the attribute. For example, if you delete an entry
that is a member of a group, the entry is automatically
removed from the group. Using this plug-in with chaining
helps simplify the management of static groups when the
group members are remote to the static group definition.
To chain this component's operations, specify the following:
nsActiveChainingComponents:
cn=referential integrity
postoperation,cn=plugins,cn=config
Attribute This plug-in checks that all the values for a specified uid
uniqueness attribute are unique (no duplicates). If you allow this
plug-in plug-in to chain, it confirms that the uid attribute values are
unique even on attributes changed through a database link.
To chain this component's operations, specify the following:
nsActiveChainingComponents: cn=attribute
uniqueness,cn=plugins,cn=config
Creating and Maintaining Database Links
Permissions
Depends upon the 4.0
plug-in you are
allowing to chain
Read, search, and
compare
Read, search, and
compare
Read, write, search, and
compare
Read, search, and
compare
Chapter 3 Configuring Directory Databases 99