Sun Microsystems 8190994 manual Mapping the Groups Configuration, Mapping the Group Object

Mapping the Groups Configuration

Mapping the Groups Configuration

Directory Proxy Server 5 uses groups to define how client connections are identified and what restrictions are placed on the client connections. In Directory Proxy Server 6.0, this functionality is achieved using connection handlers, data views and listeners.

Connection handlers, data views and listeners can be configured by using the Directory Service Control Center or by using the dpconf command. For more information, see Chapter 25, “Directory Proxy Server Connection Handlers,” in Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide and Chapter 23, “Directory Proxy Server Data Views,” in Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide.

Mapping the Group Object

In Directory Proxy Server 5, a group is defined by setting the attributes of the ids-proxy-sch-Group object class. Certain attributes of this object class can be mapped to Directory Proxy Server 6.0 connection handler properties. For a list of all the connection-handler properties, run the following command:

$ dpconf help-properties grep connection-handler

In Iplanet Directory Access Router 5.0 (IDAR) these configuration attributes are stored under ids-proxy-con-Name=name,ou=groups,ou=pd2,ou=iDAR,o=services. In Directory Proxy Server 5.2, these configuration attributes are stored under ou=groups,cn=user-defined-name,ou=dar-config,o=NetscapeRoot.

The following table maps version 5 group attributes to the corresponding connection handler properties.

TABLE 6–4Mapping Between Version 5 Group Attributes and Version 6 Connection Handler Properties

	Directory Proxy Server 5 Group Attribute	Directory Proxy Server 6.0 Connection Handler Property
	ids-proxy-con-Name	cn
	ids-proxy-con-Priority	priority
	ids-proxy-sch-Enable	is-enabled
	ids-proxy-sch-belongs-to	No equivalent
	ids-proxy-con-permit-auth-none:TRUE	allowed-auth-methods:anonymous
	ids-proxy-con-permit-auth-sasl:TRUE	allowed-auth-methods:sasl
		allowed-auth-methods:simple
	ids-proxy-con-permit-auth-simple:TRUE
88	Sun Java System Directory Server Enterprise Edition 6.0 Migration Guide • March 2007
	Sun Confidential: Registered