Database Link Attributes under cn=database_link_name, cn=chaining database, cn=plugins, cn=config199Parameter DescriptionExample nsslapd-sizelimit: 20003.5.2.13. nsTimeLimitThis attribute shows the default search time limit for the database link.Parameter DescriptionEntry DN cn=default instance config, cn=chainingdatabase, cn=plugins, cn=configValid Range -1 to maximum 32-bit integer (2147483647)secondsDefault Value 3600Syntax IntegerExample nsslapd-timelimit: 36003.5.3. Database Link Attributes under cn=database_link_name,cn=chaining database, cn=plugins, cn=configThis information node stores the attributes concerning the server containing the data. A farm serveris a server which contains data on databases. This attribute can contain optional servers for failover,separated by spaces. For cascading chaining, this URL can point to another database link.3.5.3.1. nsBindMechanismThis attribute sets a bind mechanism for the farm server to connect to the remote server. A farm serveris a server containing data in one or more databases. This attribute configures the connection type,either standard, SSL, or SASL.• empty. This performs simple authentication and requires the nsMultiplexorBindDn andnsMultiplexorCredentials attributes to give the bind information.• EXTERNAL. This uses an SSL certificate to authenticate the farm server to the remote server.Either the farm server URL must be set to the secure URL (ldaps) or the nsUseStartTLSattribute must be set to on.Additionally, the remote server must be configured to map the farm server's certificate to its bindidentity. Certificate mapping is described in the Administrator's Guide.• DIGEST-MD5. This uses SASL with DIGEST-MD5 encryption. As with simple authentication, thisrequires the nsMultiplexorBindDn and nsMultiplexorCredentials attributes to give thebind information.• GSSAPI. This uses Kerberos-based authentication over SASL. The farm server must be connectedover the standard port, meaning the URL has ldap, because the Directory Server does not supportSASL/GS-API over SSL.The farm server must be configured with a Kerberos keytab, and the remote server must have adefined SASL mapping for the farm server's bind identity. Setting up Kerberos keytabs and SASLmappings is described in the Administrator's Guide.
