Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 467 / 578

PTA Plug-In Syntax
Chapter 16 Using the Pass-Through Authentication Plug-In 467
nsslapd-pluginarg0: ldap://config.example.com/ou=NetscapeRoot
nsslapd-plugin-depends-on-type: database
nsslapd-pluginId: passthruauth
nsslapd-pluginVersion: 6.1
nsslapd-pluginVendor: Netscape Communications Corporation
nsslapd-pluginDescription: pass through authentication plugin
The user directory is now configured to send all bind requests for entries
whose DN contains
o=NetscapeRoot
to the configuration directory
configdir.example.com
.
5.
When installation is complete, the
admin
user attempts to connect to the user
directory to begin adding users.
6.
The setup program adds the
admin
user’s entry to the directory as
uid=admin,
ou=TopologyManagement,o=NetscapeRoot
. So, the user directory passes the
bind request through to the configuration directory as defined by the PTA
plug-in configuration.
7.
The configuration directory authenticates the user’s credentials and sends the
information back to the user directory.
8.
The user directory allows the admin user to bind.
PTA Plug-In Syntax
PTA plug-in configuration information is specified in the
cn=Pass Through Authentication,cn=plugins,cn=config
entry in the
dse.ldif
file on the PTA directory (the user directory configured to pass through
bind requests to the authenticating directory) using the syntax described in this
section.
dn: cn=Pass Through Authentication,cn=plugins,cn=config
objectClass: top
objectClass: nsSlapdPlugin
objectClass: extensibleObject
cn: Pass Through Authentication
nsslapd-pluginPath: /usr/netscape/servers/lib/passthru-plugin.
extension
nsslapd-pluginInitfunc: passthruauth_init
nsslapd-pluginType: preoperation
nsslapd-pluginEnabled:
state
nsslapd-pluginarg0: ldap|ldaps://
authDS
/
subtree
[
maxconns
,
maxops
,
timeout
,
ldver
,
connlifetime
]
The variable components of the PTA plug-in syntax are described in Table 16-1.