Netscape NETSCAPE DIRECTORY SERVER 6.02, Administrator'S Manual

Page: 463 / 568

Configuring the PTA Plug-In
Chapter 16 Using the Pass-Through Authentication Plug-In 463
Specifying the Pass-Through Subtree
The PTA directory passes through bind requests to the authenticating directory
from all clients whose DN is defined in the pass-through subtree. You specify the
subtree by replacing the subtree parameter in the LDAP URL of the PTA directory.
The pass-through subtree must not exist in the PTA directory. If it does, the PTA
directory attempts to resolve bind requests using its own directory contents and
the binds fail.
To specify the pass-through subtree:
1.
Create an LDIF file that contains the following LDIF update statements:
dn: cn=Pass Through Authentication,cn=plugins,cn=config
cn: Pass Through Authentication
changetype: add
add: nsslapd-pluginarg0
nsslapd-pluginarg0: ldap://
authDS
/
subtree
[
optional_parameters
]
For example, you could set the value of the
nsslapd-pluginarg0
attribute to:
"ldap://dirserver.example.com/o=NetscapeRoot [
Parameters
]"
For information on the variable components in this sytax, refer to “PTA Plug-In
Parameters,” on page 458.
2.
Use the
ldapmodify
command to import the LDIF file into the directory.
3.
Restart the server.
For information on restarting the server, refer to “Starting and Stopping the
Directory Server,” on page 31.
Configuring the Optional Parameters
You can configure the following optional parameters for the PTA plug-in:
• The maximum number of connections the PTA directory server can open
simultaneously to the authenticating directory, represented by maxconns in the
PTA syntax. The default value is
3
.
• The maximum number of bind requests the PTA directory server can send
simultaneously to the authenticating directory server within a single
connection. In the PTA syntax, this parameter is represented as maxops. The
default is value is
5
.