HP-UX Directory Server 8.1 administrator guide

The number of hops allowed is defined using the nsHopLimit attribute. If not specified, the
default value is 10.
To use the control, add the following OID to the nsTransmittedControl attribute in the
cn=config,cn=chaining database,cn=plugins,cn=config entry:
nsTransmittedControl: 1.3.6.1.4.1.1466.29539.12
If the control is not present in the configuration file of each database link, loop detection will not
be implemented.
2.4.8.5 Summary of cascading chaining configuration attributes
The following table describes the attributes used to configure intermediate database links in a
cascading chain:
Table 2-7 Cascading chaining configuration attributes
DescriptionAttribute
URL of the server containing the next database link in the cascading chain.nsFarmServerURL
Enter the following OIDs to the database links involved in the cascading chain:
nsTransmittedControls:
2.16.840.1.113730.3.4.12
nsTransmittedControls:
1.3.6.1.4.1.1466.29539.12
The first OID corresponds to the Proxy Authorization Control. The second OID
corresponds to the Loop Detection Control.
nsTransmittedControls
This attribute must contain the following ACI:
aci: (targetattr = "*")(version 3.0; acl "Proxied
authorization for database links";
allow (proxy) userdn =
"ldap:///cn=proxy ad\
min,cn=config";)
aci
To enable evaluation of local ACIs on all database links involved in chaining, turn
local ACI evaluation on, as follows:
nsCheckLocalACI: on
nsCheckLocalACI
2.4.8.6 Cascading chaining configuration example
To create a cascading chain involving three servers as in the diagram below, the chaining
components must be configured on all three servers.
2.4 Creating and maintaining database links 85