Creating and Maintaining Database Links126 Netscape Directory Server Administrator’s Guide • August 2002Configuring Cascading Chaining From the Command LineConfiguring a cascade of database links through the command line involves thefollowing steps:• Pointing one database link to the URL of the server containing the intermediatedatabase link.• Configuring the intermediate database link or links (in the example, servertwo) to transmit the Proxy Authorization Control.• Creating a proxy administrative user ACI on all intermediate database links.To do so, you will need to create a database on each server that contains anintermediate database link.• Enabling local ACI evaluation on all intermediate database links.• Creating client ACIs on all intermediate database links and the finaldestination database.Pointing to Another Database LinkTo create a cascading chain, the nsFarmServerURL attribute of one database linkmust contain the URL of the server containing another database link. For example,suppose the database link on the server called example1.com points to a databaselink on the server called africa.example.com. Thecn=database_link_name,cn=chaining database, cn=plugins,cn=config entry ofthe database link on server one would contain the following:nsFarmServerURL: ldap://africa.example.com:389Transmitting the Proxy Authorization ControlBy default, a database link does not transmit the Proxy Authorization Control.However, when one database link contacts another, this control is used to transmitinformation needed by the final destination server. The intermediate database linkneeds to transmit this control. To configure the database link to transmit the proxyauthorization control, add the following to the cn=config,cn=chainingdatabase,cn=plugins,cn=config entry of the intermediate database link:nsTransmittedControls: 2.16.840.1.113730.3.4.12The OID value represents the Proxy Authorization Control. For more informationabout chaining LDAP controls, refer to “Chaining LDAP Controls,” on page 101.
