PingDirectory

Using the create-initial-proxy-config tool

The create-initial-proxy-config tool can be used to initially configure the PingDirectoryProxy server. We strongly recommend that you use the create-initial-proxy-config tool for your initial server configuration. This tool prompts you for basic information about your topology, including external servers, their locations, and credentials for communicating with them. When the configuration is complete, the tool writes the configuration to a dsconfig batch file and allows you to apply the configuration to the local PingDirectoryProxy server. The tool assumes the following about your topology:

  • All servers are accessible through a single user account. This user account must be a root user that is not generally accessible to clients to avoid inadvertent changes, deletions, or backend server availability issues caused by reimporting data.

  • All servers support the same type of communication security.

  • All external servers are any combination of PingDirectory server, Sun Directory Server, or Red Hat (including Fedora and 389) instances.

If your topology does have these characteristics, you can use the tool to define a basic configuration that is saved to a dsconfig batch file. You can then run the dsconfig tool to fine-tune the configuration. You can also use this tool to configure an entry balancing configuration, which allows you to automatically spread entries below a common parent among multiple sets of directory servers for improved scalability and performance.

The create-initial-proxy-config tool produces a log file called create-initial-proxy-config.log that is stored in the local PingDirectoryProxy server’s logs directory.

You can only run the create-initial-proxy-config tool once for the initial configuration of each PingDirectoryProxy server instance. To tune your configuration, use the dsconfig tool. When installing a second PingDirectoryProxy server, it will not be necessary to run the create-initial-proxy-config tool again, because the PingDirectoryProxy server setup has the ability to clone the settings from an existing Directory Proxy Server.

This section describes how to use this tool to configure a standard PingDirectoryProxy server deployment as well as an entry balancing configuration.