Netscape DIRECTORY SERVER 7.0 - DEPLOYMENT Deployment Manual page 186

A Multinational Enterprise and Its Extranet
•
example.com
the directory.
example.com
of the ACI. When the directory gets an incoming LDAP operation, the ACI
macros are matched against the resource targeted by the LDAP operation. If
there is a match, the macro is replaced by the value of the DN of the targeted
resource.
For more information about macro ACIs, refer to the Netscape Directory Server
Administrator's Guide.
example.com
•
example.com
activities. When people log in to the extranet, they need a digital certificate.
The directory is used to store the certificates. Because the directory stores the
certificates, users can send encrypted email by looking up public keys stored
in the directory.
•
example.com
This protects the extranet from denial of service attacks.
•
example.com
example.com
using the extranet can only use the tools provided by
Restricting extranet users to
example.com
directory and limits the types of problems that can be introduced by extranet
users outside of
186 Netscape Directory Server Deployment Guide • October 2004
decides to use macro ACIs to minimize the number of ACIs in
uses a macro to represent a DN in the target or bind rule portion
adds the following access controls to support its extranet:
decides to use certificate-based authentication for all extranet
creates an ACI that forbids anonymous access to the extranet.
wants updates to the directory data to come only from a
hosted application. This means that partners and suppliers
example.com
administrators to use the audit logs to track the use of the
International.
example.com
example.com
's preferred tools allows
.