HP-UX Directory Server 8.1 installation guide

This allows all IP addresses to access the Administration Server.
CAUTION:
By default, access to the Administration Server is limited to users in the same domain as the
Administration Server itself. Adding additional IP addresses or proxy servers to the list of
accepted addresses increases the number of users that can access the Administration Server.
To reduce the possibility of undesirable access, limit the allowed access.
If numerous users are configured to use a proxy server, adding the proxy server increases
the number of users having access to the Administration Server. In addition, your
Administration Server only knows the IP address of the proxy server, not the address of the
actual user. Thus, if the proxy server is in a trusted domain, anyone can use that proxy server
to access the Administration Server. Although the Administration Server provides its own
authentication and access limit, HP recommends limiting access to a trusted set of users
only.
6. Restart the Administration Server.
4.1.2 Configuring proxy servers for the Administration Server
If proxies for the HTTP connections are on the client machine running the Directory Server
Console, you must change the configuration in one of two ways:
• Remove the proxy settings from the client machine. Removing proxies on the machine
running Directory Server Console allows the client to access the Administration Server
directly. To remove the proxy settings, edit the proxy configuration of the browser that is
used to launch the help files.
• Add the client machine proxy IP address to Administration Server's list of acceptable IP
addresses. This is described in “Configuring IP authorization on the Administration Server”.
CAUTION:
By default, access to the Administration Server is limited to users in the same domain as the
Administration Server itself. Adding the client machine proxy IP address potentially increases
the number of users that can access the Administration Server. To reduce the possibility of
undesirable access, limit the allowed access.
In addition, your Administration Server only knows the proxy IP address, not the address of the
actual user. Thus, given that the client machine is in a trusted domain, anyone can use the client
machine to access the Administration Server. Although the Administration Server provides its
own authentication and access limit, HP recommends limiting access to a trusted set of users
only.
4.2 Creating additional Directory Server instances
This section describes how to create new Directory Server instances by running
setup-ds-admin.pl interactively or silently. This section also explains how install a Directory
Server instance so that it is not managed by the Directory Server Console, allowing you to manage
the instance from the command line or by scripting.
38 Post-installation and advanced configuration tasks