Extending the Directory Eventing System for SRC Components
The SRC software defines a number of DES properties that extend the standard set.
- To extend the directory eventing system for SRC components, use the following format for the DES properties:
<connectionPrefix>.des.<propertySuffix>
Where the variable <connectionPrefix> is a property prefix that depends on the SRC component and the directory to which it connects. The variable <propertySuffix> depends on the DES property.
For example, the property net.juniper.smgt.des.enable_eventing is a property that specifies whether the DES for the NIC agent polls the directory periodically.
Variables to Configure DES Properties for SRC Components
The following list describes the <propertySuffix> variables for the DES properties that you can configure for SRC components.
enable_eventing
- True—SRC component polls the directory for changes.
- False—SRC component does not poll the directory for changes.
pollinginterval
- Time interval at which the SRC component polls the directory.
- Value—Number of seconds in the range 15-2147483647
event_baseDN
- DN of an entry superior to the data associated with this SRC component in the directory.
- Value—o=<DN>, <base>
- Guidelines—If you are storing non-SRC data in the directory, and that data changes frequently whereas the SRC data does not, you may need to adjust the default value to improve performance. For optimal performance, set the value to the DN of an entry superior to both the SRC data and the changing non-SRC data.
- Default—o=umc, <base>
delegate_factory_initial
- Value used by an SRC internal process.
- Value—SRC software sets the value automatically
CAUTION: Do not change this value unless instructed to do so by Juniper Networks.
connection_pool_size
- Number of directory connections that DES uses.
- Value—1
CAUTION: Do not change this value unless instructed to do so by Juniper Networks.
dispatcher_pool_size
- Number of events that the SRC component can receive from the directory simultaneously.
- Value—Integer in the range 1-2147483647
CAUTION: Some SRC components require a specific value for this property. See the documentation for the component to determine whether you can change this value.
connection_manager_id
fake_delete
- Specifies how DES tracks objects deleted from the directory.
- Value—SRC software sets the value automatically
CAUTION: Do not change this value unless instructed to do so by Juniper Networks.
show_fake_delete
share_connection
- Specifies whether other SRC components running in the same process as this SRC component share a connection to the directory with this SRC component.
- Value—
- True—SRC components share the connection.
- False—SRC components do not share the connection.
CAUTION: Do not change this value unless instructed to do so by Juniper Networks.
backup_provider
- List of redundant directories.
- Value—List of URLs separated by semicolons; URLs have the format
ldap:// <host>:389enable_sysman
connect.timeout
- Maximum time that DES waits for the directory to respond.
- Value—Number of seconds in the range 1-2147483647
retry_interval
- Time interval at which DES attempts to connect to the directory.
- Value—Number of seconds in the range 10-2147483647
connectcheck_interval
- Time interval at which DES verifies its connection to the directory.
- Value—Number of seconds in the range 15-2147483647
signatureDN
- DN of the directory entry that specifies the usedDirectory attribute. The usedDirectory attribute identifies the type of directory, such as DirX, to which the SRC software is connected. For information about this attribute, see the LDAP schema files in the SRC software distribution in the directory SDK/doc/ldap or on the Juniper Networks Web site at
http://www.juniper.net/techpubs/software/management/sdxFor information about setting this property, see Identifying the Type of Directory.
If the value of signatureDN is not the DN of a directory entry or is the DN of an entry that does not have a usedDirectory attribute, the SRC software logs an error and proceeds as it would for directory types other than DirX. If the value of the usedDirectory attribute does not correspond to a type of directory that the SRC software supports, the SRC software logs an error and proceeds as it would for directory types other than DirX.
- Value—<DN>
- Default—GlobalUserDatabase.server.signatureDN = o=umc
- Example—GlobalUserDatabase.server.signatureDN = o=SDX, o=Juniper, o=Applications
Example
java.naming.security.principal = cn=nic,ou=Components,o=Operators,<base>java.naming.security.credentials = {BASE64}bmljjava.naming.provider.url = ldap://127.0.0.1:389/java.naming.factory.initial=net.juniper.smgt.lib.des.DESInitialContextFactorynet.juniper.smgt.des.enable_eventing = truenet.juniper.smgt.des.delegate_factory_initial = com.sun.jndi.ldap.LdapCtxFactorynet.juniper.smgt.des.connection_pool_size = 1net.juniper.smgt.des.connection_manager_id = DIRAGENT_POOL_VRnet.juniper.smgt.des.dispatcher_pool_size = 1net.juniper.smgt.des.fake_delete = truenet.juniper.smgt.des.show_fake_delete = falsenet.juniper.smgt.des.directory_init_delta = 2592000net.juniper.smgt.des.polling_interval = 30net.juniper.smgt.des.share_connection=truenet.juniper.smgt.des.event_baseDN = <base>net.juniper.smgt.des.enable_sysman = falsenet.juniper.smgt.des.connect.timeout = 10net.juniper.smgt.des.retry_interval = 30net.juniper.smgt.des.connectioncheck_interval = 60net.juniper.smgt.des.signatureDN = o=umc