Sun Java System logo     Online Help
Sun Java System Directory Proxy Server 5 2004Q2

Configuration Editor Object View

The tree on the left side contains nodes for each of Directory Proxy Server's basic configuration objects. Expanding one of the main nodes shows tree nodes for each of object subtype. Clicking a tree node displays a table on the right side containing all current objects of the type indicated by the selected tree node. Object tables whose ordering is important, e.g., Network Groups, have a set of up/down buttons that allow individual objects to be raised or lowered in precedence.

Configuration object types are defined as follows:

Network Groups. Each Network Group object identifies a specific client community, and specifies the restrictions to enforce on clients that match that group.

Up (Network Group only). Moves the currently selected network group up in precedence. When Directory Proxy Server receives a client connection, network groups having higher precedence (found at the top of the table) will be evaluated for membership before network groups having lower precedence. Groups having higher precedence should have specific network binding criteria, whereas groups having lower precedence should have general network binding criteria.

Down (Network Group only). Moves the currently selected network group down in precedence. When Directory Proxy Server receives a client connection, network groups having lower precedence (found at the bottom of the table) will be evaluated for membership after network groups having higher precedence. Groups having higher precedence should have specific network binding criteria, whereas groups having lower precedence should have general network binding criteria.

Events. Event objects are used to specify conditions that occur at predetermined states. Conditions can be attached to certain events, on which, if satisfied, Directory Proxy Server can take certain actions. The following events are currently defined:

On Bind Event. Occurs when a client successfully completes a bind operation.

On SSL Established Event. Occurs when a client successfully establishes an SSL session. This event does not have any associated conditions and always executes its list of actions.

Actions. Actions are used to specify actions to take when an event occurs. The following action is currently defined:

Change Group Action. Used to specify the groups to which a client can change. For a change to occur, the client must match a DN expression associated with each group.

Properties. Each group object may include a set of properties defined by property objects. These property objects describe more specialized restrictions on the clients. The following properties are currently defined:

Attribute Renaming Property. Used to rename attributes in client queries and in server results.

Forbidden Entry Property. Used to specify a list of entries or attributes in those entries that you want to hide.

LDAP Server Property. Used to define the backend LDAP servers. In order to reduce DNS lookup overhead, Directory Proxy Server caches the DNS entry of the LDAP server host. Thus, if the IP address of your backend server changes, you must restart Directory Proxy Server.

Load Balancing Property. Used to tell Directory Proxy Server to load balance across multiple LDAP servers. Either this property can be included in a group using the "Load Balance," or the group can specify an "LDAP Server," but not both. You must specify at least one LDAP server in this property. The percentage part is the percentage of total connections that this server should be sent. The sum of all the percentages for the different servers specified must be 100. A server with zero percentage will only be used as a failover server.

Search Size Limit Property. The search size limit property can be used to apply size limits based on the search base and search scope. If neither the search base nor search scope specified in this property object entry matches a given search, the size limit defaults to the value of a group's maximum result size.



Copyright 2004 Sun Microsystems, Inc. All rights reserved.