This allows all IP addresses to access the Administration Server.

CAUTION:

By default, access to the Administration Server is limited to users in the same domain as the Administration Server itself. Adding additional IP addresses or proxy servers to the list of accepted addresses increases the number of users that can access the Administration Server. To reduce the possibility of undesirable access, limit the allowed access.

If numerous users are configured to use a proxy server, adding the proxy server increases the number of users having access to the Administration Server. In addition, your Administration Server only knows the IP address of the proxy server, not the address of the actual user. Thus, if the proxy server is in a trusted domain, anyone can use that proxy server to access the Administration Server. Although the Administration Server provides its own authentication and access limit, HP recommends limiting access to a trusted set of users only.

6.Restart the Administration Server.4.1.2Configuring proxy servers for the Administration Server

If proxies for the HTTP connections are on the client machine running the Directory Server Console, you must change the configuration in one of two ways:

•Remove the proxy settings from the client machine. Removing proxies on the machine running Directory Server Console allows the client to access the Administration Server directly. To remove the proxy settings, edit the proxy configuration of the browser that is used to launch the help files.

•Add the client machine proxy IP address to Administration Server's list of acceptable IP addresses. This is described in “Configuring IP authorization on the Administration Server”.

CAUTION:

By default, access to the Administration Server is limited to users in the same domain as the Administration Server itself. Adding the client machine proxy IP address potentially increases the number of users that can access the Administration Server. To reduce the possibility of undesirable access, limit the allowed access.

In addition, your Administration Server only knows the proxy IP address, not the address of the actual user. Thus, given that the client machine is in a trusted domain, anyone can use the client machine to access the Administration Server. Although the Administration Server provides its own authentication and access limit, HP recommends limiting access to a trusted set of users only.

4.2 Creating additional Directory Server instances

This section describes how to create new Directory Server instances by running setup-ds-admin.plinteractively or silently. This section also explains how install a Directory Server instance so that it is not managed by the Directory Server Console, allowing you to manage the instance from the command line or by scripting.

38 Post-installation and advanced configuration tasks