Red Hat 8.1 Guide d'installation télécharger pdf (Page 24)

NOTE

The Admin Server supports both IPv4 and IPv6 addresses.

The Admin Server entry can be edited using ldapm odify.

To set host restrictions:

1. Get the name of the Admin Server entry. Since the Admin Server entry has a special object class,

nsAdminConfig, it is possible to search for the entry using that object class to retrieve the DN.

/usr/lib/mozldap/ldapsearch -D "cn=directory m anager" -w secret -p 389 -h

server.example.com -b "o=NetscapeRoot" "(objectclass=nsAdminConfig)" dn

version:1

dn: cn=configuration, cn=adm in-serv-example, cn=Red Hat Adm inistration

Server, cn=Server Group, cn=server.example.com, ou=example.com,

o=NetscapeRoot

2. T o set IP address-based restrictions, edit the nsAdminAccessAddresses attribute.

/usr/lib/mozldap/ldapm odify -D "cn=directory manager" -w secret -p 389 -h

server.example.com

dn: cn=configuration, cn=adm in-serv-example, cn=Red Hat Adm inistration

Server, cn=Server Group, cn=server.example.com, ou=example.com,

o=NetscapeRoot

changetype:modify

replace:nsAdminAccessAddresses

nsAdm inAccessAddresses:72.5.*.*

Hit Enter twice to submit the operation, and then Control+C to close ldapm odify.

The nsAdminAccessAddresses value can use wildcards to allow ranges. For example, to allow all

IP addresses:

nsAdm inAccessAddresses:*

To allow only a subset of addresses on a local network:

nsAdm inAccessAddresses:192.168.123.*

3. T o set hostname or domain-based restrictions, edit the nsAdminAccessHosts attribute.

/usr/lib/mozldap/ldapm odify -D "cn=directory manager" -w secret -p 389 -h

server.example.com

dn: cn=configuration, cn=adm in-serv-example, cn=Red Hat Adm inistration

Server, cn=Server Group, cn=server.example.com, ou=example.com,

o=NetscapeRoot

changetype:modify

replace:nsAdminAccessHosts

nsAdm inAccessHosts:*.example.com

Hit Enter twice to submit the operation, and then Control+C to close ldapm odify.

Chapter 2. Admin Server Configuration

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 66 67

Pas de commentaire

Red Hat 8.1 Guide d'installation Page 24