Online Help
Sun Java (TM) System Directory Proxy Server

Network Group Server Load View

Directory Proxy Server network groups describe how to identify an LDAP client, and the restrictions to enforce for clients that match that group. Clients are initially identified into a group based on the network address from which they connect. They may change their group after a successful bind.

Network groups are tested in the descending order of priority, specified by their placement in the Network Group window. In this window, groups on the bottom of the list have less priority than those towards the top. If no groups are found to match a client, the client's request will be rejected. There must be at least one group entry in the configuration specification.

Clients are identified to belong to this network group based on their IP address and/or domain name.

Simultaneous operations per connection. Enable this option in order to limit the number of simultaneous operations Directory Proxy Server will process per connection in that group. The value is an integer greater than zero. If this attribute is not present, then no limit is enforced. For example, if you set this value to 1, all the clients in that group will be forced to perform synchronous LDAP operations. Additional simultaneous requests, except for requests to abandon an operation, will fail with Server Busy error.

Total operations per connection. Enable this option in order to limit the total number of operations that Directory Proxy Server will allow per connection in a group. The value is an integer greater than zero. If a client exceeds the maximum number of operations allowed for its group on one connection, then that connection will be closed by Directory Proxy Server. If this attribute is not present, then no limit is set.

Connections to this group. Enable this option in order to limit the number of connections to this network group.

Simultaneous connections per IP address. Enable this option to restrict the number of simultaneous connections clients can make from a single IP address. By default, any number of connections are allowed.



Copyright 2005 Sun Microsystems, Inc. All rights reserved.