Red-hat 8.1 Manual do Utilizador descarregar pdf (Página 145)

Example nsslapd-sizelimit: 2000

3.5 .2.1 3. nsTimeLimit

This attribute shows the default search time limit for the database link.

Parameter Descript ion

Entry DN cn=default instance config, cn=chaining

database, cn=plugins, cn=config

Valid Range -1 to maximum 32-bit integer (21474 83647)

seconds

Default Value 360 0

Syntax Integer

Example nsslapd-timelimit: 3600

3.5 .3. Da tabase Link At tributes under cn=da tabase_link_name, cn=chaining dat abase ,

cn=plugins, cn=config

This information node stores the attributes concerning the server containing the data. A farm server is a

server which contains data on databases. T his attribute can contain optional servers for failover,

separated by spaces. For cascading chaining, this URL can point to another database link.

3.5 .3.1. nsBindMechanism

This attribute sets a bind mechanism for the farm server to connect to the remote server. A farm server

is a server containing data in one or more databases. This attribute configures the connection type,

either standard, SSL, or SASL.

empty. T his performs simple authentication and requires the nsMultiplexorBindDn and

nsMultiplexorCredentials attributes to give the bind information.

EXTERNAL. T his uses an SSL certificate to authenticate the farm server to the remote server. Either

the farm server URL must be set to the secure URL (ldaps) or the nsUseStartTLS attribute must

be set to on.

Additionally, the remote server must be configured to map the farm server's certificate to its bind

identity. Certificate mapping is described in the Administrator's Guide.

DIGEST-MD5. T his uses SASL with DIGEST-MD5 encryption. As with simple authentication, this

requires the nsMultiplexorBindDn and nsMultiplexorCredentials attributes to give the bind

information.

GSSAPI. This uses Kerberos-based authentication over SASL. The farm server must be connected

over the standard port, meaning the URL has ldap, because the Directory Server does not support

SASL/GS-API over SSL.

The farm server must be configured with a Kerberos keytab, and the remote server must have a

defined SASL mapping for the farm server's bind identity. Setting up Kerberos keytabs and SASL

mappings is described in the Administrator's Guide.

Parameter Descript ion

Entry DN cn=database_link_name, cn=chaining database,

cn=plugins, cn=config

Valid Values

empty

EXTERNAL

DIGEST-MD5

GSSAPI

Default Value empty

Syntax DirectoryString

Example nsBindMechanism: GSSAPI

3.5 .3.2. nsFarmServe rURL

This attribute gives the LDAP URL of the remote server. A farm server is a server containing data in one

or more databases. This attribute can contain optional servers for failover, separated by spaces. If using

cascading changing, this URL can point to another database link.

Parameter Descript ion

Entry DN cn=database_link_name, cn=chaining database,

cn=plugins, cn=config

Valid Values Any valid remote server LDAP URL

Red Hat Directory Server 8.1 Configuration and Command Reference 14 5

1 2 ... 140 141 142 143 144 145 146 147 148 149 150 ... 291 292

Comentários a estes Manuais

Sem comentários

Red-hat 8.1 Manual do Utilizador Página 145

Comentários a estes Manuais