HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

NOTE:
Directory Server supports both IPv4 and IPv6 IP addresses.
The following restrictions apply to the ACIs used with database links:
• ACIs must be located with any groups they use. If the groups are dynamic, all users in the
group must be located with the ACI and the group. If the group is static, it may refer to remote
users.
• ACIs must be located with any role definitions they use and with any users intended to have
those roles.
• ACIs that refer to values of a user's entry (for example, userattr subject rules) will work if
the user is remote.
Though access controls are always evaluated on the remote server, they can also be evaluated on
both the server containing the database link and the remote server. This poses several limitations:
• During access control evaluation, contents of user entries are not necessarily available (for
example, if the access control is evaluated on the server containing the database link and the
entry is located on a remote server).
For performance reasons, clients cannot do remote inquiries and evaluate access controls.
• The database link does not necessarily have access to the entries being modified by the client
application.
When performing a modify operation, the database link does not have access to the full entry
stored on the remote server. If performing a delete operation, the database link is only aware
of the entry's DN. If an access control specifies a particular attribute, then a delete operation
will fail when being conducted through a database link.
NOTE:
By default, access controls set on the server containing the database link are not evaluated. To
override this default, use the nsCheckLocalACIattribute in the cn=database_link,
cn=chaining database,cn=plugins,cn=configentry. However, evaluating access controls
on the server containing the database link is not recommended except with cascading chaining.
2.4.7 Tuning database link performance
The following sections provide information on tuning the performance of database links through
connection and thread management.
• “Managing connections to the remote server” (page 72)
• “Detecting errors during normal processing” (page 75)
• “Managing threaded operations” (page 76)
2.4.7.1 Managing connections to the remote server
Each database link maintains a pool of connections to a remote server. The connections to optimize
resources can be configured for the directory.
2.4.7.1.1 Managing connections to the remote server using the console
1. Select the Configuration tab, expand the Data folder in the left pane, and select the suffix,
then the database link to change.
72 Configuring Directory Databases