Creating a Network Group

Network groups are the entry point of all requests between the client and the Sun OpenDS Standard Edition proxy. You can create many network groups, in which case the requests will be handled by the network group with the highest priority, for which the criteria are met. Therefore, when you create a network group, you must consider all the network groups you plan to create, and the priority of each. The priority can be 0 or above, where 0 is the highest priority.

Note - It is possible to create two network groups with the same priority. However if two or more network groups have the same priority and match the client request, the network group that will handle the request is random, among those matching the client request. Therefore, it is recommended to use a different priority for each network group created.

The default properties of a new network group are as follows.

Property              : Value(s)
----------------------:--------------------------------------------------------
allowed-auth-method   : All authorization methods are allowed.
allowed-bind-dn       : All bind DNs are allowed.
allowed-client        : All clients with addresses that do not match an address
                      : on the deny list are allowed. If there is no deny list,
                      : then all clients are allowed.
allowed-protocol      : All supported protocols are allowed.
denied-client         : If an allow list is specified, then only clients with
                      : addresses on the allow list are allowed. Otherwise, all
                      : clients are allowed.
enabled               : true
is-security-mandatory : false
priority              : 1
workflow              : workflow1

Once you have created a network group, you can associate a network group quality of service policy to it. For information on creating a quality of service policy, see Creating a Network Group Quality of Service Policy.

To Create a Network Group

• To create a network group, use the dsconfig create-network-group command.

  For example:

  $ dsconfig -h localhost -p 4444 -D "cn=Directory Manager" -w password -X -n \
    create-network-group \
    --group-name network-group1 \
    --set enabled:true \
    --set workflow:workflow1 \
    --set priority:1