Sun Java System Directory Server Enterprise Edition 6.3 Administration Guide

Configuring Listeners Between Clients and Directory Proxy Server

Directory Proxy Server provides a secure listener and a nonsecure listener for communication with clients. For information about listeners for Directory Proxy Server, see Directory Proxy Server Client Listeners in Sun Java System Directory Server Enterprise Edition 6.3 Reference. This section describes how to configure the listeners.

ProcedureTo Configure the Listeners Between a Client and Directory Proxy Server


Note –

This procedure configures the nonsecure listener between a client and Directory Proxy Server. To configure the secure listener, perform the same procedure but replace ldap with ldaps.


You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help. In DSCC, you can configure this property on the Performance tab.

  1. View the properties of the nonsecure listener.


    $ dpconf get-ldap-listener-prop -h host -p port
    

    The default properties of the nonsecure listener are as follows:


    connection-idle-timeout          :  1h
    connection-read-data-timeout     :  2s
    connection-write-data-timeout    :  1h
    is-enabled                       :  true
    listen-address                   :  0.0.0.0
    listen-port                      :  port-number
    max-connection-queue-size        :  128
    max-ldap-message-size            :  unlimited
    number-of-threads                :  2
    use-tcp-no-delay                 :  true
  2. Change one or more of properties that are listed in Step 1 according to your requirements.


    $ dpconf set-ldap-listener-prop -h host -p port property:new-value
    

    For example, to disable the nonsecure port for an instance of Directory Proxy Server running on host1, run the following command:


    $ dpconf set-ldap-listener-prop -h host1 -p 1389 is-enabled:false

    Caution – Caution –

    If you plan to use a non-privileged port number, you must run Directory Proxy Server as root.


    To change the nonsecure port number, run the following command:


    $ dpconf set-ldap-listener-prop -h host -p port listen-port:new-port-number
    
  3. If necessary, restart the instance of Directory Proxy Server for the changes to take effect.

    Changes to certain listener properties require a server restart. dpconf alerts you if the server must be restarted. For information about restarting Directory Proxy Server, see To Restart Directory Proxy Server.