proxied-auth-check-timeout

Directory Proxy Server configuration property

Description

Characteristic	Value
Syntax	`duration`
Default value	1800000
Must be set	No
Is modifiable	Yes
Is multivalued	No
Requires restart	No

This property specifies a timeout used during proxy authorization.

When a client operation contains a proxy authorization control, Directory Proxy Server checks that the clientDN has the right to impersonate the clientPauthDN.

If client-cred-mode(5DPCONF) is set to use-proxy-auth, Directory Proxy Server checks that the clientDN has the relevant ACIs in the LDAP server by using the getEffectiveRights command.

The result is cached in the Directory Proxy Server and renewed when proxied-auth-check-timeout expires.

The duration is expressed in milliseconds.

This property is used to configure the following features:

server: The global configuration of Directory Proxy Server contains properties that affect the overall operation of Directory Proxy Server.

Attributes

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWdsee7
Stability Level	Evolving