Accessing Databases From Virtual Servers - Netscape ENTREPRISE SERVER 6.1 - 08-2002 ADMINISTRATOR Administrator's Manual

Controlling Access for Virtual Servers
This configuration allows multiple virtual servers to share the same ACL file. If
you want to require user-group authentication for a virtual server, you must add
one or more USERDB tags to its definition. These USERDB tags create a connection
between the database names in your ACL file and the actual databases found in
dbswitch.conf
The following example maps the ACLs with no 'database' attribute to the 'default'
database in
<VS>
<USERDB id="default" database="default"/>
</VS>

Accessing Databases from Virtual Servers

You can globally define user authentication databases in the
is only read at server startup.
The
baseDN
accesses to the database. This maintains backward compatibility. For most new
installations, the
dcsuffix
root of the DC tree according to the Netscape LDAP schema. It is relative to the
baseDN
database is Netscape LDAP schema compliant, and the behaviour of some
operations changes. For more information about the Netscape LDAP schema, see
the Netscape Enterprise Server NSAPI Programmer's Guide.
For every virtual server, you can define one or more
one of the directories, and you can define additional information. The
blocks ID can be referenced in the database parameter of the ACL. If a virtual
server has no
USERDB
attribute of an ACL and
necessary protection for the server administrator to have full control over which
databases virtual server administrators have access to.
For more information on USERDB, see the Netscape Enterprise Server NSAPI
Programmer's Guide.
204 Netscape Enterprise Server Administrator's Guide • August 2002
.
:
dbswitch.conf
of the LDAP URL in
would be empty.
baseDN
is a new attribute for LDAP databases in
in the LDAP URL. When the
blocks, user or group-based ACLs will fail.
USERDB
tags define an additional layer of indirection between the database
dbswitch.conf
defines the global root of all
dbswitch.conf
dbswitch.conf
attribute is present, the LDAP
dcsuffix
USERDB
. This layer of indirection adds the
file. It
dbswitch.conf
that defines the
blocks that point to
USERDB