Red Hat DIRECTORY SERVER 8.0, Руководство администратора

Страница: 80 / 552

Chapter 3. Configuring Directory Databases
62
3.3.1.2.2. Chaining LDAP Controls from the Command Line
Alter the controls that the database link forwards by changing the
nsTransmittedControls
attribute of the
cn=config,cn=chaining database, cn=plugins,cn=config
entry. For
example, to forward the virtual list view control, add the following to the database link entry in the
configuration file:
nsTransmittedControls: 2.16.840.1.113730.3.4.9
In addition, if clients of the Directory Server create their own controls and their operations should to
be chained to remote servers, add the OID of the custom control to the
nsTransmittedControls
attribute.
The LDAP controls which can be chained and their OIDs are listed in the following table:
Control Name OID
Virtual list view (VLV) 2.16.840.1.113730.3.4.9
Server-side sorting 1.2.840.113556.1.4.473
Managed DSA 2.16.840.1.113730.3.4.2
Loop detection 1.3.6.1.4.1.1466.29539.12
Table 3.3. LDAP Controls and Their OIDs
For more information about LDAP controls, refer to the LDAP C-SDK documentation at
http://
www.mozilla.org/directory
.
3.3.2. Creating a New Database Link
The basic configuration of the database link involves the following information:
•
Suffix information.
A suffix is created in the directory tree that is managed by the database link, not a
regular database. This suffix corresponds to the suffix on the remote server that contains the data.
•
Bind credentials.
When the database link binds to a remote server, it impersonates a user, and this
specifies the DN and the credentials for each database link to use to bind with remote servers.
•
LDAP URL.
This supplies the LDAP URL of the remote server to which the database link connects.
•
List of failover servers.
This supplies a list of alternative servers for the database link to contact in
the event of a failure. This configuration item is optional.
3.3.2.1. Creating a New Database Link Using the Console
To create a new database link using the Directory Server Console:
1. In the Directory Server Console, select the
Configuration
tab.
2. Right-click
Data
in the left navigation pane, and select
New Root Suffix
or
New Sub Suffix
from
the pop-up menu.
A
Create New Suffix
dialog box is displayed.
3. Enter the name of the suffix on the remote server to which to chain the suffix in the
New suffix
field.