eTrust Directory Administrator Guide - CA Technologies

DXconsole
DXconsole
The management console, DXconsole, lets you enter commands interactively. It
lets you monitor users, modify administrative controls, and perform actions.
DXconsole also includes a powerful co-resident directory client (DUA)
command-line interface, which you can use to enter user queries for diagnostic
or prototyping tasks.
For more information about the DUA, see the eTrust Directory SDK Developer
Guide.
DXconsole Security
For security reasons, DXconsole is only accessible from the local computer.
The management console only accepts one telnet session. To prevent anyone else
from starting up DXconsole, make sure you keep DXconsole always running.
To prevent attacks from remote telnet sessions, define a console port in the DSA
knowledge. This scheme uses the local host security. An administrator must have
an account on the local computer to communicate with the DSA through this
port.
You can use the console remotely when you set the remote-console-port flag. You
can attach a password, and SSL may be required. See Configuring DXconsole for
more information.
Opening DXconsole
Open DXconsole
To open DXconsole, use the telnet command to connect to the local host with
the console-port number:
% telnet localhost 19390;
Trying 127.0.0.1...
Connected to localhost.
Escape character is ‘^]’.
Welcome to the DSA Management Console
dsa>
Open Remotely
To open DXconsole remotely, use the telnet command to connect to the remote
machine with the remote-console-port:
% telnet eagle 19392
Note: You should enable local echo on the local telnet client.
2–14 eTrust Directory Administrator Guide