Product SiteDocumentation Site

Chapter 6. Advanced Setup and Configuration

6.1. Working with Administration Server Instances
6.1.1. Configuring IP Authorization on the Administration Server
6.1.2. Configuring Proxy Servers for the Administration Server
6.2. Working with Directory Server Instances
6.2.1. Creating a New Directory Server Instance
6.2.2. (Alternate) Installing Directory Server with setup-ds
6.2.3. Registering an Existing Directory Server Instance with the Configuration Directory Server
6.2.4. Updating and Re-registering Directory Server Instances
6.3. Silent Setup
6.3.1. Silent Setup for Directory Server and Administration Server
6.3.2. Silent Directory Server Instance Creation
6.3.3. Sending Parameters in the Command Line
6.3.4. Using the ConfigFile Parameter to Configure the Directory Server
6.3.5. About .inf File Parameters
6.4. Uninstalling Directory Server
6.4.1. Removing a Single Directory Server Instance
6.4.2. Uninstalling Directory Server
After the default Directory Server and Administration Server have been configured, there are tools available to manage, create, and remove server instances. These include Administration Server conigurations to allow people to access the Directory Server files remotely, silent setup tools for installing instances from file configuration, and instance setup and removal scripts.

6.1. Working with Administration Server Instances

There are two additional setup steps that can be done with the Administration Server. This first allows the Administration Server to be accessed by remote clients, so that users can install and launch the Directory Server Console and still access the remote Directory Server file, such as help files.

NOTE

If you lock yourself out of the Console or Administration Server, you may have to edit the Administration Server configuration directly via LDAP. See http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt for information on editing the Administration Server configuration.

6.1.1. Configuring IP Authorization on the Administration Server

The Directory Server Console can be launched from remote machines to access an instance of Directory Server. The client running Directory Server Console needs access to the Administration Server to access support files like the help content and documentation.
There are six steps to configure the Administration Server to accept the client IP address:
  1. On the same machine on which the Administration Server is running launch the Console. 
    /usr/bin/redhat-idm-console
  2. In the Administration Server Console, click the Configuration tab, then click the Network tab.
  3. In the Connection Restrictions Settings section, select IP Addresses to Allow from the pull down menu.
  4. Click Edit.
  5. In the IP Addresses field, enter the following: 
    *.*.*.*
    This allows all IP addresses to access the Administration Server.
  6. Restart the Administration Server.

WARNING

Adding the client machine proxy IP address to the Administration Server creates a potential security hole.
If there are proxies for the HTTP connections on the client machine running the Directory Server Console, the configuration must be changed in one of two ways:

WARNING

Adding the client machine proxy IP address to the Administration Server creates a potential security hole.