Previous Topic: Configure the CA Directory Router

Next Topic: Populate the CA Directory Database to Create a DIT


Customize the CA Directory Router Definitions

After configuring the CA Directory router, you need to customize the CA Directory router definitions.

Follow these steps:

  1. Navigate to the following directory, where DXHOME is the directory where CA Directory is installed:
    DXHOME/config/limits
    
  2. Do the following:
    1. Create a copy of the default.dxc file and renames the original file to dsarouter-adrouter.dxc
    2. Remove the ReadOnly flag from the file
    3. Open the dsarouter-adrouter.dxc file and modify the following fields as follows:
      # size limits
      set max-users = 255;
      set max-local-ops = 100;
      set max-op-size = 0;
      
      # time limits
      set max-bind-time = none;
      set bind-idle-time = 3600;
      set max-op-time = 600;
      

      Save and close the file.

  3. Navigate to the following directory:
    DXHOME/config/settings
    
  4. Do the following:
    1. Create a copy of the default.dxc file and rename the original file to dsarouter-adrouter.dxc
    2. Remove the ReadOnly flag from the file
    3. Open the dsarouter-adrouter.dxc file and modify the following fields as follows:
      # directory information base
      set alias-integrity = true;
      # distribution controls
      set multi-casting = true;
      set always-chain-down = false;
      # security controls
      set min-auth = clear-password;
      set allow-binds = true;
      set ssl-auth-bypass-entry-check = false;
      # general controls
      set op-attrs = true;
      set transparent-routing = true;
      

      Save and close the file

  5. Navigate to the following directory:
    DXHOME/config/knowledge
    
  6. Open, or create, the dsarouter-adrouter.dxc file and remove the auth-levels string value "anonymous" to enable clear password login only. For example:
    set dsa "cadirhost-adrouter" =
    {
    
        prefix        = <>
        dsa-name      = <cn "cadirhost-adrouter">
        dsa-password  = "secret"
        address       = tcp "cadirhost" port 25389
        disp-psap     = DISP
        snmp-port     = 25389
        console-port  = 25390
    
     auth-levels   = clear-password
    

    Save and close the file.

    Important! If you installed CA Directory on a server where both IPv4 and IPv6 addresses are defined, specify IPv6 and IPv4 address types in the tcp value. For example: address = tcp "fe80::20d:56ff:fed4:8300%5" port 19389, tcp "192.168.1.1" port 19389

  7. Create a file named adrouter.dxa and add the following lines, then save and close the file:
    source "dsarouter-adrouter.dxc";
    source "acdir1-dxlink.dxc";
    source "acdir2-dxlink.dxc";
    
  8. Navigate to the following directory:
    DXHOME/config/logging
    
  9. Do the following:
    1. Create a copy of the default.dxc file
    2. Rename the original file to dsarouter-adrouter.dxc
    3. Remove the ReadOnly tag.
  10. Navigate to the following directory:
    DXHOME/config/servers
    
  11. Do the following:
    1. Edit the cadirhost-adrouter.dxi, modify the following lines as follows then save and close the file:
      #
      # Initialization file written by DXnewdsa
      #
      # logging and tracing
      source "../logging/cadirhost-adrouter.dxc";
      # schema
      clear schema;
      source "../schema/default.dxg";
      # knowledge
      clear dsas;
      source "../knowledge/adrouter.dxg";
      # operational settings
      source "../settings/cadirhost-adrouter.dxc";
      # service limits
      source "../limits/cadirhost-adrouter.dxc";
      # access controls
      clear access;
      source "../access/default.dxc";
      # ssl
      source "../ssld/default.dxc";
      # replication agreements (rarely used)
      # source "../replication/";
      # multiwrite DISP recovery
      set multi-write-disp-recovery = false;
      # grid configuration
      set dxgrid-db-location = "data";
      set dxgrid-db-size = 1;
      set cache-index = all-attributes;
      set lookup-cache = true;
      

Note: Replace cadirhost with the CA Directory host name.

You have customized the CA Directory router definitions.