Exit Print View

Sun OpenDS Standard Edition 2.2 Administration Guide

Get PDF Book Print View
 

Document Information

Before You Start

Starting and Stopping Your Server Instance

Configuring the Server Instance

Configuring the Proxy Components

Configuring Network Groups

Creating a Network Group

To Create a Network Group

Modifying Network Group Properties

Creating a Network Group Quality of Service Policy

To Modify a Network Group Quality of Service Policy

Configuring a Workflow

Listing Existing Workflows

Viewing Workflow Properties

Creating a Workflow

Configuring Workflow Elements

Listing Workflow Elements

Configuring an LDAP Proxy

Listing LDAP Proxy Elements

Listing LDAP Server Extensions

Listing Proxy Workflow Elements

Viewing LDAP Proxy Element Properties

Viewing LDAP Server Extension Properties

Viewing Advanced LDAP Server Extension Properties

Viewing Proxy Workflow Element

Adding an LDAP Proxy

Creating an LDAP Server Extension

Creating a Proxy LDAP Workflow Element

Modifying an LDAP Proxy

Modifying LDAP Server Extension Properties

Modifying LDAP Server Extension Advanced Properties

LDAP Data Source Monitoring Connection Properties

Modifying a Proxy LDAP Workflow Element Properties

Configuring Load Balancing

Configuring Load Balancing

Creating a Load Balancing Workflow Element

Creating a Load Balancing Algorithm

Creating the Load Balancing Routes

Modifying Load Balancing Properties

Modifying the Load Balancing Algorithm Type

Modifying the Load Balancing Route Properties

Setting Client Connection Affinity

Deleting Load Balancing Elements

Configuring Distribution

Configuring Distribution

Creating a Distribution Workflow Element

Creating a Distribution Algorithm

Creating a lexico or numeric Distribution Partition

Creating a dnpattern Distribution Partition

Managing Modify DN Requests

Deleting Distribution

Configuring the Global Index

Configuring Global Index Catalogs

To Create a Global Index Catalog Containing Global Indexes

To View Global Index Catalog Properties

Modifying the Properties of a Global Index Catalog

To View Global Index Properties

To Import Contents of a File into a Global Index Catalog

To Export Contents of a Global Index Catalog to a File

To Associate a Global Index Catalog to a Distribution

To Disassociate a Global Index Catalog From a Distribution

To Add a Global Index to a Global Index Catalog

To Remove a Global Index From a Global Index Catalog

Configuring Controls Required by the Global Index Catalog with Sun OpenDS Standard Edition

Replication of Global Index Catalogs

To Enable Global Index Catalog Replication

To Initialize Global Index Catalog Replication

To Disable Global Index Catalog Replication

To View the Status of a Replicated Global Index Catalog Configuration

Logging of Replication Activities

Lifecycle Examples for Replicated Global Index Catalogs

Configuring Security Between Clients and Servers

Configuring Security Between the Proxy and the Data Source

Configuring Servers With the Control Panel

Managing Directory Data

Replicating Directory Data

Controlling Access To Data

Managing Users and Groups

Monitoring Sun OpenDS Standard Edition

Improving Performance

Advanced Administration

Creating a dnpattern Distribution Partition

To create the dnpattern distribution partitions, the distribution workflow element and distribution algorithm must already be created.

To create a dnpattern distribution partition, use the dsconfig create-distribution-partition command. For example:

$ dsconfig -h localhost -p 4444 -D "cn=Directory Manager" -w password -X -n \
  create-distribution-partition \
  --element-name distrib-we \
  --partition-name distrib-partition5 \
  --type dnpattern \
  --set partition-id:5 \
  --set workflow-element: proxy-we1 \
  --set dn-pattern:uid=[0-9]*[01].* 

A distribution partition is identified by both a partition name, in this example, distrib-partition5 and a partition id. The partition id must be an simple integer, as it will be used for the global index catalog reference. In order to create a distribution partition, you must also indicate the name of the existing distribution workflow (here distrib-we), and the name of the associated workflow element, such as an LDAP proxy (in this example proxy-we1). The type must be the same as the one defined by the distribution algorithm associated, in this case dnpattern.

When creating distribution using a dnpattern algorithm, requests are sent to a partition when the request RDNs below the distribution base DN matches the DN string pattern. For example, if the distribution base DN is ou=people,dc=example,dc=com and the request base DN is uid=1,ou=people,dc=example,dc=com then the check against the string pattern is done on the RDN uid=1.

Similarly, if the distribution base DN is ou=people,dc=example,dc=com and the request base DN is uid=1,ou=region1,ou=people,dc=example,dc=com then the check against the string pattern is done on the RDNs uid=1,ou=region1.

DN Pattern String Syntax

The DN string pattern must comply with the DN syntax and with a subset of the Java Pattern class.

.
any character
\\
backslash
\t
TAB character
[abc]
a, b, or c
[^abc]
any character except a, b, or c
[a-zA-Z]
a through z, or A through Z, inclusive (range)
[a-d[m-p]]
a through d, or m through p (union)
[a-z&&[def]]
d, e, or f (intersection)
[a-z&&[^bc]]
a through z, except for b and c (subtraction)
[A-Z&&[^M-P]]
a through z, and not m through p (subtraction)

The following quantifiers can be used:

X?
X, once or not at all
X*
X, zero or more times
X+
X, one or more times
X{n}
X, exactly n times
X{n,}
X, at least n times
X{n,m}
X, at least n times but no more than m times
Using DN Pattern negative-match

The distribution property called negative-match allows you to specify the opposite of the DN pattern that should be matched. That is, you specify a DN pattern to be ignored; any value that does not match the specified DN pattern will be distributed. By default, the negative-match property is set to false.

Create a dnpattern distribution partition using negative-match as follows:

$ dsconfig -h localhost -p 4444 -D "cn=Directory Manager" -w password -X -n \
  create-distribution-partition \
  --element-name distrib-we \
  --partition-name distrib-partition5 \
  --type dnpattern \
  --set partition-id:5 \
  --set workflow-element: proxy-we1 \
  --set dn-pattern:uid=[123]*[0-9].* \
  --set negative-match:true

In the example above, since negative-match has been set to true, any requests with uid not starting with 1, 2, or 3, with n characters following will be forwarded to the partition.