Red Hat DIRECTORY SERVER 8.1 - USING THE ADMIN SERVER Using Instructions

Also see for 8.1: Installation guide Release note Deployment guide Using instruction Reference

Contents

Red Hat DIRECTORY SERVER 8.1 - USING THE ADMIN SERVER Using Instructions Manual pdf 24 page image

Chapter 2. Admin Server Configuration16When specifying IP address restrictions, include all three separating dots. If you do not, the AdminServer returns an error message.7. Click OK to close the Add... dialog box, and then click the Save button to save the new host.8. Open the Tasks tab, and click the Restart Server button to restart the server and apply thechanges.To change the information for a host or IP address listed, click the Edit button and change the giveninformation. To remove an allowed host or IP address, select the host from the list, and click Remove.Admin Server.2.6.2. Setting Host Restrictions in the Command LineHost restrictions sets rules for what network clients can connect to the Admin Server and, therefore,to services which use the Admin Server. There are two kinds of host restrictions, restrictions based onthe host or domain name and restrictions based on the IP address.The Admin Server host restrictions are set in the main configuration entry in the ConfigurationDirectory Server's o=NetscapeRoot database. There are two attributes for setting host restrictions,nsAdminAccessAddresses and nsAdminAccessHosts for IP addresses and hostnames,respectively.NOTEThe Admin Server supports both IPv4 and IPv6 addresses.The Admin Server entry can be edited using ldapmodify.To set host restrictions:1. Get the name of the Admin Server entry. Since the Admin Server entry has a special object class,nsAdminConfig, it is possible to search for the entry using that object class to retrieve the DN./usr/lib/mozldap/ldapsearch -D "cn=directory manager" -w secret -p 389 -h server.example.com -b "o=NetscapeRoot" "(objectclass=nsAdminConfig)"dnversion:1dn: cn=configuration, cn=admin-serv-example, cn=Red Hat AdministrationServer, cn=Server Group, cn=server.example.com, ou=example.com,o=NetscapeRoot2. To set IP address-based restrictions, edit the nsAdminAccessAddresses attribute./usr/lib/mozldap/ldapmodify -D "cn=directory manager" -w secret -p 389 -h server.example.com