The * wildcard can be used to specify a group of hosts. For instance, *.example.com allows all machines in the example.com domain to access the instance. Entering 205.12.*. allows all hosts whose IP addresses begin with 205.12 to access the instance.

When specifying IP address restrictions, include all three separating dots. If you do not, the Admin Server returns an error message.

7.Click OK to close the Add... dialog box, then click the Save button to save the new host.

8.Open the Tasks tab, and click the Restart Server button to restart the server and apply the changes.

To change the information for a host or IP address listed, click the Edit button and change the given information. To remove an allowed host or IP address, select the host from the list, and click Remove. Admin Server.

2.6.2 Setting host restrictions in the command line

Host restrictions sets rules for what network clients can connect to the Admin Server and, therefore, to services which use the Admin Server. There are two kinds of host restrictions, restrictions based on the host or domain name and restrictions based on the IP address.

The Admin Server host restrictions are set in the main configuration entry in the Configuration Directory Server's o=NetscapeRoot database. There are two attributes for setting host restrictions, nsAdminAccessAddresses and nsAdminAccessHosts for IP addresses and host names, respectively.

NOTE:

The Admin Server supports both IPv4 and IPv6 addresses.The Admin Server entry can be edited using ldapmodify.To set host restrictions:

1.Get the name of the Admin Server entry. Since the Admin Server entry has a special object class, nsAdminConfig, it is possible to search for the entry using that object class to retrieve the DN.

ldapsearch -D "cn=directory manager" -w secret -p 389 -h server.example.com \ -b "o=NetscapeRoot" "(objectclass=nsAdminConfig)" dn

version:1

dn: cn=configuration, cn=admin-serv-example, cn=HPDS Administration Server, cn=Server Group, cn=server.example.com, ou=example.com, o=NetscapeRoot

2.To set IP address-based restrictions, edit the nsAdminAccessAddresses attribute.

ldapmodify -D "cn=directory manager" -w secret -p 389 -h server.example.com

dn: cn=configuration, cn=admin-serv-example, cn=HPDS Administration Server, cn=Server Group, cn=server.example.com, ou=example.com,

16 Admin Server configuration