Changing Access to the Directory that Stores SRC Configuration Data

Use the following configuration statements to change connection properties for the directory that stores SRC configuration data:


            
               system ldap client {
               base-dn  base-dn ; 
               
               url  url ; 
               
               backup-urls [ backup-urls ...]; 
               
               principal  principal ; 
               
               credentials  credentials ;
               
               timeout  timeout ; 
               
               time-limit  time-limit ; 
               
               }

Note: Before you change directory connection properties, make sure that all configuration changes have been committed.

To change connection information to the directory that stores SRC configuration information:

From configuration mode, access the configuration statement that configures the directory connection.


                  
                     [edit]
                     user@host# edit system ldap client

(Optional) Change the DN of the root directory to store SRC configuration information. You can use the default root o=umc.


                  
                     [edit system ldap client]
                     user@host# set base-dn  base-dn

(Optional) Change the URL that identifies the location of the primary directory server.


                  
                     [edit system ldap client]
                     user@host# set url   url

(Optional) Specify URLs that identify the locations of backup directory servers.


                  
                     [edit system ldap client]
                     user@host# set backup-urls  backup-url-n backup-url-n2

Backup servers are used if the primary directory server is not accessible.

(Optional) Change the DN that defines the username with which an SRC component accesses the directory.


                  
                     [edit system ldap client]
                     user@host# set principal  principal

For example:


                  
                     [edit system ldap client]
                     user@host# set principal-dn cn=area1,o=Operators,o=umc

(Optional) Change the password used for authentication with the directory server.


                  
                     [edit system ldap client]
                     user@host# set credentials  credentials

(Optional) Specify the maximum amount of time during which the directory must respond to a connection request.


                  
                     [edit system ldap client]
                     user@host# set timeout  timeout

(Optional) Specify the length of time to wait for a connection to the directory to be established. If you set the value to 0, there is no time limit.


                  
                     [edit system ldap client]
                     user@host# set time-limit  time-limit

(Optional) Change directory eventing properties for the CLI.

Note: Do not change the value for the enable-eventing, polling-interval, connection-manager-id, dispatcher-pool-size, or event-base-dn statements unless instructed to do so by Juniper Networks.

The eventing statement is enabled by default.

In most cases, you use the default configuration for directory eventing properties. .

Changing Access to the Directory that Stores SRC Configuration Data

Related Topics