Sun Microsystems 8190994 manual Mapping Attributes Restricting Search Responses

Mapping the Groups Configuration

Enterprise Edition 6.0 Administration Guide. For information on configuring a resource limits policy, see “Creating and Configuring a Resource Limits Policy” in Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide.

In Iplanet Directory Access Router 5.0 (IDAR) these configuration attributes are stored under ids-proxy-con-Name=group-name,ou=groups,ou=pd2,ou=iDAR,o=services. In Directory Proxy Server 5.2, these configuration attributes are stored under ou=groups,cn=user-defined-name,ou=dar-config,o=NetscapeRoot.

The following table maps the Directory Proxy Server 5 search request modifying attributes to the corresponding Directory Proxy Server 6 properties.

TABLE 6–10Mapping of Directory Proxy Server 5 Search Request Modifying Attributes to Directory Proxy Server 6 Properties

Directory Proxy Server 5 Attribute	Directory Proxy Server 6 Property
ids-proxy-con-minimum-base	allowed-subtrees property of the request filtering
	policy
ids-proxy-con-max-scope	allowed-search-scopes property of the request
	filtering policy
ids-proxy-con-max-timelimit	search-time-limit property of the resource limits
	policy

Mapping Attributes Restricting Search Responses

In Directory Proxy Server 5, these attributes describe restrictions that are applied to search results being returned by the server, before they are forwarded to the client. In Directory Proxy Server 6, this functionality is provided by setting the properties of a resource limits policy and by configuring search data hiding rules.

For information about configuring a resource limits policy, see “Creating and Configuring a Resource Limits Policy” in Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide. For information about creating search data hiding rules, see “To Create Search Data Hiding Rules” in Sun Java System Directory Server Enterprise Edition 6.0 Administration Guide. For a list of properties associated with a search data hiding rule, run the following command:

$ dpconf help-properties grep search-data-hiding-rule

In Iplanet Directory Access Router 5.0 (IDAR) these configuration attributes are stored under ids-proxy-con-Name=group-name,ou=groups,ou=pd2,ou=iDAR,o=services. In Directory Proxy Server 5.2, these configuration attributes are stored under ou=groups,cn=user-defined-name,ou=dar-config,o=NetscapeRoot.

94 Sun Java System Directory Server Enterprise Edition 6.0 Migration Guide • March 2007

Sun Confidential: Registered