Netscape ENTERPRISE SERVER 6.1, Manual

Page: 307 / 373

User Database Selection
Chapter 8 Virtual Server Configuration Files 307
A virtual server is then selected as follows:
• If the connection group is configured to only a default virtual server, that
virtual server is selected.
• If the connection group has more than one virtual server configured to it, the
request
Host
header is matched to the
urlhosts
attribute of a virtual server. If
no
Host
header is present or no
urlhosts
attribute matches, the default virtual
server for the connection group is selected.
If a virtual server is configured to an SSL listen socket, its
urlhosts
attribute is
checked against the subject pattern of the certificate at server startup, and a
warning is generated and written to the error log if they don’t match.
User Database Selection
A USERDB object selects a user database for the containing virtual server. How this
selection occurs depends on the virtual server’s ACL file and the
dbswitch.conf
file.
The ACL file format is unchanged from previous Enterprise Server versions.
However, the following changes have been made in Enterprise Server:
• Virtual servers in
server.xml
reference ACL files. The
magnus.conf
file no
longer references ACL files.
• The ACL file’s
database
attribute does not map to a
dbswitch.conf
entry
directly, but instead maps to an
id
attribute of a USERDB element. The
database
attribute of the USERDB element then maps to a
dbswitch.conf
entry. This extra layer between the ACL file and the
dbswitch.conf
file gives
the server administrator full control over which databases virtual server
administrators and users have access to.
Enterprise Server 6.0 introduced the following changes to the
dbswitch.conf
file
and LDAP databases:
• The base DN in the LDAP URL in
dbswitch.conf
defines a root object for all
further DN specifications. So, for most new installations, it can be empty,
because the final base DN is determined in other ways -- either through a DC
tree lookup or an explicit “
basedn
” value in the
USERDB
tag.
• A new
dbswitch.conf
attribute for LDAP databases,
dcsuffix
, defines the
root of the DC tree. This root is relative to the base DN in the LDAP URL. You
can use
dcsuffix
if the database is schema compliant. Requirements for schema
compliance are listed in “The Netscape LDAP Schema,” on page 308.