The Trusted DSA NSAPs attribute contains a list of NSAP
addresses through which DSAs can contact this DSA and perform
chained read and chained modify operations.
Syntax:
SET DSA TRUSTED DSA NSAPS {<address>, ....}
where <address> is the NSAP address, for example:
SET DSA TRUSTED DSA NSAPS {%x49002aaa00040008aa21}
The default value is an empty set of NSAP addresses, indicating
that all NSAPs are allowed.
You can specify the leading characters of an NSAP to indicate
that trusted access is allowed for any DSA using an
NSAP beginning with that sequence of characters. For example:
SET DSA TRUSTED DSA NSAPS {%x49002a}
The default value is an empty set of NSAP addresses, indicating
that DSAs can use any NSAP.
Trusted access is required by DSAs that are attempting to chain
a requested for an authenticated user. This DSA must decide
whether the calling DSA is to be trusted when it claims to have
authenticated the user satisfactorily.
Note that this attribute has no effect on DSA communications
for other purposes, such as replication.
Note also that the DSA refers to the value of this attribute
whenever it receives a new connection. Once a connection is
established, the caller is treated as a trusted DSA for as
long as the connection lasts. Changing the value of the
attribute has no effect on existing connections, only on
subsequent connections.