- Book Information
- Index
- Preface
- Part I Directory Server Administration
- Chapter 1 Directory Server Tools
- Chapter 2 Directory Server Instances
and Suffixes
- Quick Procedure for Creating Server Instances and Suffixes
- Creating and Deleting a Directory Server Instance
- Starting, Stopping, and Restarting a Directory Server Instance
- Creating Suffixes
- Disabling or Enabling a Suffix
- Setting Referrals and Making a Suffix Read-Only
- Importing Data From an LDIF File
- Deleting a Suffix
- Compacting a Suffix
- Chapter 3 Directory Server Configuration
- Displaying the Configuration of Directory Server Instance
- Modifying the Configuration Using DSCC
- Modifying the Configuration From the Command Line
- Modifying the dse.ldif File
- Configuring Administration Users
- Protecting Configuration Information
- Changing Directory Server Port Numbers
- Configuring DSML
- Setting the Server as Read-Only
- Configuring Memory
- Setting Resource Limits For Each Client Account
- Chapter 4 Directory Server Entries
- Managing Entries
- Managing Entries Using DSCC
- Extending Entries Using DSCC
- Managing Entries Using ldapmodify and ldapdelete
- To Move or Rename an Entry Using ldapmodify
- Guidelines and Limitations for Using the Modify DN Operation
- Grouping Entries for Simplified Management
- Compressing Entries
- Setting Referrals
- Checking Valid Attribute Syntax
- Tracking Modifications to Directory Entries
- Encrypting Attribute Values
- Managing Entries
- Chapter 5 Directory Server Security
- Using SSL With Directory Server
- Managing Certificates
- To View the Default Self-Signed Certificate
- To Manage Self-Signed Certificates
- To Request a CA-Signed Server Certificate
- To Add the CA-Signed Server Certificate and the Trusted CA Certificate
- To Renew an Expired CA-Signed Server Certificate
- To Export and Import a CA-Signed Server Certificate
- Configuring the Certificate Database Password
- Backing Up and Restoring the Certificate Database for Directory Server
- Configuring SSL Communication
- Configuring Credential Levels and Authentication Methods
- Configuring LDAP Clients to Use Security
- Using SASL DIGEST-MD5 in Clients
- Using Kerberos SASL GSSAPI in Clients
- To Configure Kerberos V5 on a Host
- To Specify SASL Options for Kerberos Authentication
- Example Configuration of Kerberos Authentication
Using GSSAPI With SASL
- Assumptions for This Example
- All Machines: Edit the Kerberos Client Configuration File
- All Machines: Edit the Administration Server ACL Configuration File
- KDC Machine: Edit the KDC Server Configuration File
- KDC Machine: Create the KDC Database
- KDC Machine: Create an Administration Principal and Keytab
- KDC Machine: Start the Kerberos Daemons
- KDC Machine: Add Host Principals for the KDC and Directory Server Machines
- KDC Machine: Add an LDAP Principal for the Directory Server
- KDC Machine: Add a Test User to the KDC
- Directory Server Machine: Install the Directory Server
- Directory Server Machine: Configure the Directory Server to Enable GSSAPI
- Directory Server Machine: Create a Directory Server Keytab
- Directory Server Machine: Add a Test User to the Directory Server
- Directory Server Machine: Get a Kerberos Ticket as the Test User
- Client Machine: Authenticate to the Directory Server Through GSSAPI
- Pass-Through Authentication
- Chapter 6 Directory Server Access
Control
- Creating, Viewing, and Modifying ACIs
- To Create, Modify, and Delete ACIs
- To View ACI Attribute Values
- To View ACIs at the Root Level
- ACI Syntax
- ACI Targets
- ACI Permissions
- ACI Bind Rules
- Introduction to Bind Rules
- Bind Rule Syntax
- Bind Rule Keywords
- userdn Keyword
- Syntax of the userdn Keyword
- LDAP URLs in the userdn Keyword
- groupdn Keyword
- roledn Keyword
- userattr Keyword
- Examples of userattr Keyword With Various Bind Types
- Use of the userattr Keyword With the parent Keyword for Inheritance
- Use of the userattr Keyword to Grant Add Permissions
- ip Keyword
- dns Keyword
- timeofday Keyword
- dayofweek Keyword
- authmethod Keyword
- Boolean Bind Rules
- To Allow Normal Users to Manage User Accounts Using dsutil Command
- Access Control Usage Examples
- Granting Anonymous Access
- Granting Write Access to Personal Entries
- Granting Access to a Certain Level
- Restricting Access to Key Roles
- Granting a Role Full Access to an Entire Suffix
- Granting a Group Full Access to a Suffix
- Granting Rights to Add and Delete Group Entries
- Allowing Users to Add or Remove Themselves From a Group
- Granting Conditional Access to a Group or Role
- Denying Access
- Proxy Authorization
- Setting a Target Using Filtering
- Defining Permissions for DNs That Contain a Comma
- Viewing Effective Rights
- Advanced Access Control: Using Macro ACIs
- Logging Access Control Information
- Client-Host Access Control Through TCP Wrapping
- Creating, Viewing, and Modifying ACIs
- Chapter 7 Directory Server Password Policy
- Chapter 8 Directory Server Backup and Restore
- Chapter 9 Directory Server Groups, Roles, and CoS
- Chapter 10 Directory Server Replication
- Planning Your Replication Deployment
- Recommended Interface for Configuring and Managing Replication
- Summary of Steps for Configuring Replication
- Enabling Replication on a Dedicated Consumer
- Enabling Replication on a Hub
- Enabling Replication on a Master Replica
- Configuring the Replication Manager
- Creating and Changing Replication Agreements
- Fractional Replication
- Replication Priority
- Initializing Replicas
- Indexing Replicated Suffixes
- Incrementally Adding Many Entries to Large Replicated Suffixes
- Replication and Referential Integrity
- Replication Over SSL
- Replication Over a WAN
- Modifying the Replication Topology
- Replication With Releases Prior to Directory Server 7.0
- Using the Retro Change Log
- Getting Replication Status
- Solving Common Replication Conflicts
- Chapter 11 Directory Server Schema
- Chapter 12 Directory Server Indexing
- Chapter 13 Directory Server Attribute Value Uniqueness
- Chapter 14 Directory Server Logging
- Chapter 15 Directory Server Monitoring
- Part II Directory Proxy Server Administration
- Chapter 16 Directory Proxy Server Tools
- Chapter 17 Directory Proxy Server Instances
- Working With Directory Proxy Server Instances
- To Create a Directory Proxy Server Instance
- To Find the Status of a Directory Proxy Server Instance
- To Start and Stop Directory Proxy Server
- To List All the Running Instances
- To Stop the Running Instances
- To View Whether It Is Necessary to Restart a Directory Proxy Server Instance
- To Restart Directory Proxy Server
- To Delete a Directory Proxy Server Instance
- Configuring Directory Proxy Server Instances
- Backing Up and Restoring Directory Proxy Server Instances
- Working With Directory Proxy Server Instances
- Chapter 18 LDAP
Data Views
- Creating LDAP Data Views
- Accessing Configuration Entries for a Directory Server by Using Directory Proxy Server
- Renaming Attributes and DNs
- Configuring View Exclusion Base and Alternate Search Base
- Creating and Configuring Data Views for Example Use
Cases
- Default Data View
- Data Views That Route All Requests, Irrespective of the Target DN of the Request
- Data Views That Route Requests When a List of Subtrees Is Stored on Multiple, Data-Equivalent Data Sources
- Data Views That Provide a Single Point of Access When Different Subtrees Are Stored in Different Data Sources
- Data Views That Provide a Single Point of Access When Superior and Subordinate Subtrees Are Stored in Different Data Sources
- Chapter 19 Directory Proxy Server Certificates
- Default Self-Signed Certificate
- Creating, Requesting and Installing Certificates for Directory Proxy Server
- Renewing an Expired CA-Signed Certificate for Directory Proxy Server
- Listing Certificates
- Adding a Certificate From a Back-End LDAP Server to the Certificate Database on Directory Proxy Server
- Exporting a Certificate to a Back-End LDAP Server
- Backing Up and Restoring a Certificate Database for Directory Proxy Server
- Prompting for a Password to Access the Certificate Database
- Chapter 20 Directory Proxy Server Load
Balancing and Client Affinity
- Configuring Load Balancing
- To Select a Load Balancing Algorithm
- To Configure Weights for Load Balancing
- Example Configurations for Load Balancing
- To Configure the Proportional Algorithm for Load Balancing
- To Configure the Saturation Algorithm for Load Balancing
- To Configure the Operational Affinity Algorithm for Global Account Lockout
- To Configure Operational Affinity Algorithm for Cache Optimization
- To Configure the Failover Algorithm for Load Balancing
- Configuring Directory Proxy Server To Perform Load Balancing
- Configuring Client Affinity
- Configuring Load Balancing
- Chapter 21 Directory Proxy Server Distribution
- Configuring Directory Proxy Server Distribution Algorithms
- Configuring Directory Proxy Server for Distribution of Suffix Data
- Creating and Configuring Data Views for Example Use Cases
- Chapter 22 Directory Proxy Server Virtualization
- Creating and Configuring LDIF Data Views
- Defining Access Control on Virtual Data Views
- Defining Schema Checking on Virtual Data Views
- Creating and Configuring Join Data Views
- Creating and Configuring Coordinator Data Views
- Creating and Configuring JDBC Data Views
- Sample Virtual Configurations
- Joining an LDAP Directory and a MySQL Database
- Joining Multiple Disparate Data
Sources
- Data Storage Scenario
- Client Application Requirements
- Aggregate Data From the HR LDAP Directory and the Administration LDIF File
- Add Data From Company 22 to Example.Com's DIT by Renaming the DN
- Add Company 22's Data to the HR Data
- Enable LDAP Clients to Access the Payroll Data in an SQL Database
- Add Virtual Access Control
- Chapter 23 Virtual
Data Transformations
- Configuring Virtual Data Transformations
- Virtual Transformation Examples
- Deriving an Attribute From the Existing Attributes of an Entry
- Mapping a Virtual Attribute to a Physical Attribute
- Displaying a Second Virtual Value of an Attribute, Specified by Another Physical Attribute
- Storing a Second Value to an Attribute Specified by Another Physical Attribute
- Removing an Attribute From the Output
- Masking an Attribute While Saving an Entry
- Displaying a Default Value of an Attribute
- Storing a Default Value to an Attribute
- Chapter 24 Connections
Between Directory Proxy Server and Back-End LDAP Servers
- Configuring Connections Between Directory Proxy Server and Back-End LDAP Servers
- Configuring SSL Between Directory Proxy Server and Back-End LDAP Servers
- Choosing SSL Ciphers and SSL Protocols for Directory Proxy Server
- Forwarding Requests to Back-End LDAP Servers
- Chapter 25 Connections Between Clients and Directory Proxy Server
- Chapter 26 Directory Proxy Server Client Authentication
- Chapter 27 Directory Proxy Server Logging
- Chapter 28 Directory Proxy Server Monitoring and Alerts
- Part III Directory Service Control Center Administration