> - Downloads
> - Configuring Access to Subscriber Data
> - Related Topics
> - Creating Grouped Configurations for the SAE (SRC CLI)
> - Configuring Access Through LDAPS to Service and Subscriber Data
> - Configuring Access to Service Data
> - Viewing General Information for Subscriber Sessions
> - Viewing Statistics for Subscriber and Service Sessions with the CLI

> # Configuring Access to Subscriber Data

> Use the following configuration statements to configure access to subscriber data:

> `
> shared sae configuration ldap subscriber-data {
>   subscription-loading-filter (subscriberRefFilter | objectClassFilter);
>   load-subscriber-schedules;
>   login-cache-dn login-cache-dn ;
>   session-cache-dn session-cache-dn ;
>   server-address server-address ;
>   dn dn ;
>   authentication-dn authentication-dn ;
>   password password ;
>   directory-eventing;
>   polling-interval polling-interval ;
>   (ldaps);
> }
> `

> To configure SAE access to subscriber data:

> 1. From configuration mode, access the configuration statement that configures SAE access to subscriber data in the directory. In this sample procedure, the subscriber data is configured in the se-region group.
>    `
>    user@host# edit shared sae group se-region configuration ldap subscriber-data
>    `
> 2. Select the filter that the SAE uses to search for subscriptions in the directory when the SAE loads a subscription to a subscriber reference filter.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set subscription-loading-filter (subscriberRefFilter | objectClassFilter)
>    `
> 3. (Optional) Enable loading of subscriber schedules.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set load-subscriber-schedules
>    `
> 4. Specify the subtree in the directory in which subscriber information is stored.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set login-cache-dn login-cache-dn
>    `
> 5. Specify the subtree in the directory in which persistent session data is cached.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set session-cache-dn session-cache-dn
>    `
> 6. (Optional) Specify the directory server that stores subscriber information.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set server-address server-address
>    `
> 7. Specify the subtree in the directory where subscriber data is cached.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set dn dn
>    `
> 8. (Optional) Specify the DN that the SAE uses to authenticate access to the directory server.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set authentication-dn authentication-dn
>    `
> 9. (Optional) Specify the password used to authenticate access to the directory server.
>    `
>    [edit shared sae group se-region configuration ldap subscriber-data]
>    user@host# set password password
>    `
> 10. (Optional) Enable automatic discovery of changes in subscriber profiles.
>     `
>     [edit shared sae group se-region configuration ldap subscriber-data]
>     user@host# set directory-eventing
>     `
> 11. Set the frequency for checking the directory for updates.
>     `
>     [edit shared sae group se-region configuration ldap subscriber-data]
>     user@host# set polling-interval polling-interval
>     `
> 12. Enable LDAPS as the secure protocol for connections to the server that stores subscriber data.
>     `
>     [edit shared sae group se-region configuration ldap subscriber-data]
>     user@host# set ldaps
>     `
> 13. (Optional) Verify your configuration.

>         [edit shared sae group se-region configuration ldap subscriber-data]
>         user@host# show
>         subscription-loading-filter objectClassFilter;
>         load-subscriber-schedules;
>         login-cache-dn o=users,<base>;
>         session-cache-dn o=PersistentSessions,<base>;
>         server-address 127.0.0.1;
>         dn o=users,<base>;
>         authentication-dn cn=ssp,o=components,o=operators,<base>;
>         password ********;
>         directory-eventing;
>         polling-interval 30;
>         ldaps;

> #### Published: 2009-09-15

> Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.