Accessing Databases From Virtual Servers - Netscape ENTREPRISE SERVER 6.1 - 04-2002 ADMINISTRATOR Administrator's Manual

This configuration allows multiple virtual servers to share the same ACL file. If
you want to require user-group authentication for a virtual server, you must add
one or more USERDB tags to its definition. These USERDB tags create a connection
between the database names in your ACL file and the actual databases found in
.
dbswitch.conf
The following example maps the ACLs with no 'database' attribute to the 'default'
database in
dbswitch.conf
<VS>
<USERDB id="default" database="default"/>
</VS>

Accessing Databases from Virtual Servers

You can globally define user authentication databases in the
is only read at server startup.
The of the LDAP URL in
baseDN
accesses to the database. This maintains backward compatibility. For most new
installations, the
baseDN
is a new attribute for LDAP databases in
dcsuffix
root of the DC tree according to the Netscape LDAP schema. It is relative to the
in the LDAP URL. When the
baseDN
database is Netscape LDAP schema compliant, and the behaviour of some
operations changes. For more information about the Netscape LDAP schema, see
the Netscape Enterprise Server NSAPI Programmer's Guide.
For every virtual server, you can define one or more
one of the directories, and you can define additional information. The
blocks ID can be referenced in the database parameter of the ACL. If a virtual
server has no
USERDB
tags define an additional layer of indirection between the database
USERDB
attribute of an ACL and
necessary protection for the server administrator to have full control over which
databases virtual server administrators have access to.
For more information on USERDB, see the Netscape Enterprise Server NSAPI
Programmer's Guide.
:
dbswitch.conf
would be empty.
dcsuffix
blocks, user or group-based ACLs will fail.
. This layer of indirection adds the
dbswitch.conf
Controlling Access for Virtual Servers
dbswitch.conf
defines the global root of all
dbswitch.conf
attribute is present, the LDAP
blocks that point to
USERDB
Chapter 8 Controlling Access to Your Server
file. It
that defines the
USERDB
205