access control instruction (ACI)
authentication password syntax
authorization identity control
Common Development and Distribution License
deprecated password storage scheme
Directory Services Markup Language
entry change notification control
extensible match search filter
greater than or equal to search filter
less than or equal to search filter
Lightweight Directory Access Protocol
notice of disconnection unsolicited notification
Password Modify extended operation
Simple Authentication and Security Layer
virtual attributes only control
A Directory Server back end provides a repository for storing data and a set of logic for interacting with that data. A back end will typically contain some kind of database and may maintain a set of indexes that allows the back end to quickly locate entries for various operations. All back ends will have the following qualities:
A back end ID, which uniquely identifies that back end among all other back ends in the server.
A set of one or more base DNs that indicate the data that the back end holds.
A writability mode, which indicates whether the back end will accept write operations.
The logic provided by the back end includes:
A method for determining whether a given entry exists, based on its DN
A method for retrieving an entry, based on its DN
A method of adding a new entry to the database (as part of processing an LDAP add operation)
A method for removing an existing entry from the database (as part of processing an LDAP delete operation)
A method for replacing an entry in the database (as part of processing an LDAP modify operation)
A method for renaming an entry in the database (as part of processing an LDAP modify DN operation)
A method for processing an LDAP search operation
A method for exporting the contents of the database in LDIF form
A method for importing data in LDIF form into the database
A method for performing a backup of the data
A method for performing a restore of a previous backup