Configuring Access to Service Data

Use the following configuration statements to configure access to service data:

shared sae configuration ldap service-data {
server-address server-address ;
dn dn;
authentication-dn authentication-dn ;
password password ;
directory-eventing;
polling-interval polling-interval ;
(ldaps);
}

To configure SAE access to service data:

  1. From configuration mode, access the configuration statement that configures SAE access to service data in the directory. In this sample procedure, the service data is configured in the se-region group.
    user@host# edit shared sae group se-region configuration ldap service-data
  2. (Optional) Specify the directory server that stores service data.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set server-address server-address
  3. Specify the subtree in the directory where service data is cached.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set dn dn
  4. (Optional) Specify the DN that the SAE uses to authenticate access to the directory server.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set authentication-dn authentication-dn
  5. (Optional) Specify the password used to authenticate access to the directory server.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set password password
  6. (Optional) Enable or disable automatic discovery of changes to service data.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set directory-eventing
  7. Set the frequency for checking the directory for updates.
    [edit shared sae group se-region configuration ldap service-data]
    user@host# set polling-interval polling-interval
  8. Enable LDAPS as the secure protocol for connections to the server that stores service data.
    edit shared sae group se-region configuration ldap service-data]
    user@host# set ldaps
  9. (Optional) Verify your configuration. 
    [edit shared sae group se-region configuration ldap service-data]
user@host# show 
server-address 10.10.45.3;
dn <base>;
authentication-dn <base>;
password ********;
directory-eventing;
polling-interval 30;
ldaps;