Netscape NETSCAPE DIRECTORY SERVER 6.02, Administrator'S Manual

Page: 461 / 568

Configuring the PTA Plug-In
Chapter 16 Using the Pass-Through Authentication Plug-In 461
3.
When you enable the plug-in, you must also check that the plug-in
initialization function is properly defined.
The entry
cn=Pass Through Authentication,cn=plugins,cn=config
should contain the following attribute-value pairs:
nsslapd-pluginPath: /usr/netscape/servers/lib/passthru-plugin.
extension
nsslapd-pluginInitfunc: passthruauth_init
where extension is always
.sl
on HP-UX,
.so
on all other UNIX platforms, and
.dll
on Windows.
4.
Restart the server.
For information on restarting the server, refer to “Starting and Stopping the
Directory Server,” on page 31.
To disable the plug-in, change the LDIF update statements to delete the
nsslapd-pluginenabled: on
statement, and add the
nsslapd-pluginenabled:
off
statement. Whenever you enable or disable the PTA plug-in from the
command line, you must restart the server.
Configuring the Servers to Use a Secure
Connection
You can configure the PTA directory to communicate with the authenticating
directory over SSL. You do this by specifying LDAPS in the LDAP URL of the PTA
directory.
To configure the PTA directory and authenticating directory to use SSL:
1.
Create an LDIF file that contains the following LDIF update statements:
dn: cn=Pass Through Authentication,cn=plugins,cn=config
cn: Pass Through Authentication
changetype: modify
replace: nsslapd-pluginarg0
nsslapd-pluginarg0: ldaps://
authDS
/
subtree
[
optional_parameters
]
For information on the variable components in this sytax, refer to “PTA Plug-In
Parameters,” on page 458.
2.
Use the
ldapmodify
command to import the LDIF file into the directory.