Chapter 3. Configuring Directory Databases
92
3.4.4.1. Creating Suffix Referrals Using the Console
To create a suffix referral using the Console, do the following:
1. Select the
Configuration
tab.
2. Under
Data
in the left pane, click the suffix to which to add a referral.
3. In the
Suffix Settings
tab, select one of the following radio buttons:
•
Return Referrals for all Operations
. This means that a referral will be returned when this suffix
receives any request from a client application.
•
Return Referrals for Update Operations
. This means a referral will be returned when this
suffix receives an update request from a client application. This option is used to redirect update
and write requests made by client applications to a read-only database.
4. Click the
Referrals
tab. Enter an LDAP URL in the
Enter a new referral
field, or click
Construct
to be guided through the creation of an LDAP URL.
For more information about the structure of LDAP URLs, see
Appendix C, LDAP URLs
.
5. Click
Add
to add the referral to the list.
You can enter multiple referrals. The directory will return the entire list of referrals in response to
requests from client applications.
6. Click
Save
.
3.4.4.2. Creating Suffix Referrals from the Command Line
Add a suffix referral to the root or sub suffix entry in the directory configuration file under the
cn=mapping tree,cn=config
branch.
1. Run
ldapmodify
.
1
For example:
ldapmodify -a -h example.com -p 389 -D "cn=directory manager" -w secret
The
ldapmodify
utility binds to the server and prepares it to add information to the configuration
file.
2. Add a suffix referral to the
ou=people,dc=example,dc=com
root suffix, as follows:
dn: cn=ou=people,dc=example,dc=com,cn=mapping tree,cn=config
objectclass: extensibleObject
objectclasss: nsmappingtree
nsslapd-state: referral
nsslapd-referral: ldap://zanzibar.com/
The
nsslapd-state
attribute is set to
referral
, meaning that a referral is returned for
requests made to this suffix. The
nsslapd-referral
attribute contains the LDAP URL of the
referral returned by the suffix, in this case a referral to the
zanzibar.com
server.
The
nsslapd-state
attribute can also be set to
referral on update
. This means that the
database is used for all operations except update requests. When a client application makes an
update request to a suffix set to
referral on update
, the client receives a referral.
Содержание DIRECTORY SERVER 8.0
Страница 18: ...xviii ...
Страница 29: ...Configuring the Directory Manager 11 6 Enter the new password and confirm it 7 Click Save ...
Страница 30: ...12 ...
Страница 112: ...94 ...
Страница 128: ...110 ...
Страница 190: ...Chapter 6 Managing Access Control 172 4 Click New to open the Access Control Editor ...
Страница 224: ...206 ...
Страница 324: ...306 ...
Страница 334: ...316 ...
Страница 358: ...340 ...
Страница 410: ...392 ...
Страница 420: ...402 ...
Страница 444: ...426 ...
Страница 454: ...436 ...
Страница 464: ...446 ...
Страница 484: ...466 ...
Страница 512: ...494 ...
Страница 522: ...504 ...