HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

2.4.1.2.6 Summary of database link configuration attributes
The following table lists the attributes available for configuring a database link. Some of these
attributes were discussed in the earlier sections. All instance attributes are defined in the
cn=database_link, cn=chaining database,cn=plugins,cn=config entry.
Values defined for a specific database link take precedence over the global attribute value.
Table 3 Database link configuration attributes
ValueAttributes
Gives the OID of LDAP controls forwarded by the database link to the remote data
server.
nsTransmittedControls
1
The suffix managed by the database link. Any changes to this attribute after the entry
has been created take effect only after the server containing the database link is
restarted.
nsslapd-suffix
Default search time limit for the database link, given in seconds. The default value is
3600 seconds.
nsslapd-timelimit
Default size limit for the database link, given in number of entries. The default value is
2000 entries.
nsslapd-sizelimit
Gives the LDAP URL of the remote server (or farm server) that contains the data. This
attribute can contain optional servers for failover, separated by spaces. If using
cascading chaining, this URL can point to another database link.
nsFarmServerURL
DN of the administrative entry used to communicate with the remote server. The term
multiplexor in the name of the attribute means the server that contains the database
nsMultiplexorBindDN
link and communicates with the remote server. This bind DN cannot be the Directory
Manager. If this attribute is not specified, the database link binds as anonymous.
Password for the administrative user, given in plain text. If no password is provided, it
means that users can bind as anonymous. The password is encrypted in the
configuration file.
nsMultiplexorCredentials
Reserved for advanced use only. Controls whether ACIs are evaluated on the database
link as well as the remote data server. Takes the values on or off. Changes to this
attribute occur only after the server has been restarted. The default value is off.
nsCheckLocalACI
Reserved for advanced use only. Disables proxied authorization. A value of off means
proxied authorization is disabled. The default value is on.
nsProxiedAuthorization
Lists the components using chaining. A component is any functional unit in the server.
The value of this attribute in the database link instance overrides the value in the global
nsActiveChainingComponents
1
configuration attribute. To disable chaining on a particular database instance, use the
value none. The default policy is not to allow chaining. For more information, see
“Chaining component operations” (page 63).
Controls whether referrals are returned by scoped searches. This attribute is for
optimizing the directory because returning referrals in response to scoped searches is
more efficient. Takes the values on or off. The default value is off.
nsReferralOnScopedSearch
Maximum number of times a request can be forwarded from one database link to
another. The default value is 10.
nsHopLimit
1
Can be both a global and instance attribute. This global configuration attribute is located in the cn=config,
cn=chaining database,cn=plugins,cn=config entry. The global attributes are dynamic, meaning any changes
made to them automatically take effect on all instances of the database link within the directory.
2.4.1.2.7 Database link configuration example
Suppose a server within the us.example.com domain contains the subtree l=Walla
Walla,ou=people,dc=example,dc=com on a database and that operation requests for the
l=Zanzibar,ou=people,dc=example,dc=com subtree should be chained to a different
server in the africa.example.com domain.
2.4 Creating and Maintaining Database Links 61