Novell LDAP Proxy 1.0 Administration Guide - NetIQ

3 Define a name to identify the policy, an action, and a default action for the policy.
For more information on the elements and attributes that are used to define a Map Schema
policy, refer to “Configuring a Map Schema Policy” on page 41.
4 Save the nlpconf.xml file.
Configuring a Map Schema Policy
The following elements and attributes are used to configure Map Schema policies:
: Specifies that the element configured is a Map Schema policy. This
element must have the following attributes:
• id-policy: The identity of the policy. The value of this attribute is used to refer to the policy that
is being configured. This is a mandatory attribute.
The element can have the following child elements:
• : An explanation about the policy. This is an optional element used for reference
purposes.
• : The rule associated with the Map Schema policy that is configured. Every policy has a
rule. This element can have the following child elements:
• : The action to be performed.
In the sample configuration, the action to be performed is specified as ,
which means that all incoming requests and outgoing responses satisfying the condition
must be allowed to perform schema mapping on the directory structure. It specifies the
following mapping:
• The cn attribute maps to the CommonName attribute
• The c attribute maps to the country attribute
• The o attribute maps to the organization attribute
• : The default action to be performed if the condition evaluates to false.
In the sample configuration, the default action is specified as , which
means that all incoming requests and outgoing responses are not allowed to perform
schema mapping.
Depending on how you want to configure the policy, the and
elements can have the following child elements:
• : Map the schema based on attributes.
• : Do not perform any action.
3.7.4 Search Request Policy
The Search Request policy must be defined in the node of the XML configuration
file.
For instance, assume you want to define a Search Request policy, search-policy, with the search
scope as sub-tree and the filter-type as present. You want the match attribute to be defined as caseignore,
which means that the container can be either cn or CN. If any of these conditions evaluates to
true, then the search request is denied. You can define the configuration as follows:
Manually Configuring Novell LDAP Proxy 41