Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 79 / 532

Chapter 3, Setting Administration Preferences 79
Configuring Directory Services
Configuring Directory Services
You can manage all your user information from a single source via an open-
systems server protocol called the
Lightweight Directory Access Protocol
(LDAP) . You can also configure the server to allow your users to retrieve
directory information from multiple, easily accessible network locations.
To configure the directory services preferences, perform the following steps:
1.
Access the Enterprise Administration Server and choose the Global Settings
tab.
2.
Click the Configure Directory Service link.
3.
Make the desired changes and click OK.
For more information, see “The Configure Directory Service Page,” in the online
help.
Restricting Server Access
You can control access to the entire server or to parts of the server (that is,
directories, files, file types). When the server evaluates an incoming request, it
determines access based on a hierarchy of rules called
access-control entries
(ACEs) , and then it uses the matching entries to determine if the request is
allowed or denied. Each ACE specifies whether or not the server should
continue to the next ACE in the hierarchy. The collection of ACEs is called an
access-control list (ACL) .When a request comes in to the server, the server
looks in
obj.conf
for a reference to an ACL, which is then used to determine
access. By default, the server has one ACL file that contains multiple ACLs.
You can set access control globally for all servers through the Enterprise
Administration Server or for a resource within a specific server instance through
the Server Manager. For more information about setting access control for a
resource, see “Restricting Access to Your Web Site,” on page 334 in Chapter 14,
“Controlling Access to Your Server.”
Note
You must turn on distributed administration before you can restrict server
access.