Online Help | |
Sun Java (TM) System Directory Proxy Server | |
Network Group Search View References Tab
Directory Proxy Server network groups describe how to identify an LDAP client, and the restrictions to enforce for clients that match that group. Clients are initially identified into a group based on the network address from which they connect. They may change their group after a successful bind.
Network groups are tested in the descending order of priority, specified by their placement in the Network Group window. In this window, groups on the bottom of the list have less priority than those towards the top. If no groups are found to match a client, the client's request will be rejected. There must be at least one group entry in the configuration specification.
Clients are identified to belong to this network group based on their IP address and/or domain name.
This tab specifies what to do if a search continuation reference is generated during a search.
Group name. Enter the group name that specifies the name of the group. This value must be unique within the set of groups. This value must be present as it forms the RDN of entries of this class.
Enable. By default, this option is selected for you. Deselect it to disable a group in a configuration. For a group to be part of Directory Proxy Server configuration, this option must be selected.
Discard the reference. By default, this option is enabled, which will discard a reference if it is generated during a search.
Forward the reference to the client. Enable this option only to forward a search continuation reference.
Follow the reference and return result to client. Enable this option to follow and return the result for a search continuation reference. A search continuation referral is a special case of a referral whereby part of the query has been satisfied by the original directory server queried but that directory server has a reference to another directory server with more data satisfying the query. This option can be used to hide the part of your Directory Information Tree whose naming context is mastered by another LDAP server. It also prevents clients from finding out the network address and port on which this server runs.
Copyright 2005 Sun Microsystems, Inc. All rights reserved.