Accessing Configuration Entries for a Directory Server by Using Directory Proxy Server

The configuration entries for Directory Proxy Server are in cn=config. When you use Directory Proxy Server to access configuration entries, by default, you access the configuration entries of Directory Proxy Server.

To access the configuration entries of a directory server, it is better to connect directly to Directory Server, not to Directory Proxy Server. For information about how to configure Directory Server, see Chapter 3, Directory Server Configuration.

If you reconfigure Directory Proxy Server to access the configuration entries of a directory server, you are likely to break the administration framework of Directory Proxy Server.

If you really need to access the configuration entries of a directory server through Directory Proxy Server, take special steps to ensure that you do not break the administration framework of Directory Proxy Server. This section describes how to access the configuration entries of a directory server by using Directory Proxy Server.

To Access the Configuration Entries of a Directory Server by Using Directory Proxy Server

1. Create a data source as described in Creating and Configuring LDAP Data Sources.

2. Create an LDAP data source pool as described in Creating and Configuring LDAP Data Source Pools.

3. To expose the configuration entries of one specific data source, attach only one LDAP data source to the LDAP data source pool as described in Attaching LDAP Data Sources to a Data Source Pool.

   $ dpconf attach-ldap-data-source -h host -p port pool-name data-source-name

   After performing this step, a client can access the configuration entries of the data source that is connected to Directory Proxy Server.

   If you attach more than one LDAP data source to the LDAP data source pool, you can access the configuration entries of one of the data sources connected to Directory Proxy Server. However, you cannot know which data source the configuration entries belong to.

   You must set the weights of an attached data source for Directory Proxy Server to work as intended. For more information, see Attaching LDAP Data Sources to a Data Source Pool.

4. Create an LDAP data view to expose cn=config.

   $ dpconf create-ldap-data-view -h host -p port view-name pool-name cn=config