Sun logo      Previous      Contents      Index      Next     

Sun ONE Meta-Directory 5.1.1 Product Brief

Chapter 1
Meta-Directory Overview

This chapter provides an overview of the Sun ONE Meta-Directory software including how data is integrated and how components interact. It contains the following sections:

What is Meta-Directory?

Sun ONE Meta-Directory is a set of software components that synchronize data from one or more external data sources into a single repository. This repository then becomes the authoritative source for the combined data, acting as a starting point for searches and for modifications that flow back to the original data sources. These data sources can include LDAP directories, Oracle databases, and other proprietary formats.

Meta-Directory Components

The Join Engine and direct and indirect connectors are the components which flow data into and out of Meta-Directory and integrate it into one definitive source. The connectors transfer information to and from a number of data sources to the Join Engine. The Join Engine links these entries together to form one repository.


A connector transfers information between an external data source and its corresponding Connector View. When configuring a connector to transfer the information, an LDAP sub-tree is created on a Directory Server. This sub-tree is called a Connector View. The Connector View is populated with LDAP-structured copies of the entries that reside in the external data source. From this Connector View, Meta-Directory is able to integrate the new LDAP-structured data into an LDAP Meta View.

There are two types of connectors: direct and indirect. Direct connectors are plugins to the join-engine, which allow bi-directional synchronization of data from SunONE Directory Server (Sun One Directory Server 5.2, iPlanet Directory Server 5.x, and Netscape Directory Server 4.16) and Oracle database server (8.1.7, 8.1.9, and 9i) to the Meta View stored in SunONE Directory Server. Indirect connectors allow bi-directional synchronization of data from other external data sources (such as, Active Directory Server, NT Domain, Formatted-Text-Data, Novell Directory Server, and Lotus Notes) to the corresponding Connector View stored in the SunONE Directory Server.

Direct Connectors

SunONE Directory Server (Sun One Directory Server 5.2, iPlanet Directory Server 5.x, and Netscape Directory Server 4.16) an Oracle database accessible using Oracle Call Interface have direct connections to the Join Engine. In order to read and write to an entry stored within Oracle’s SQL database, the Join Engine uses the Database connector plug-in to provide direct, two-way access. (Because the Database Connector is a Join Engine plug-in as opposed to a connector outside the Join Engine, it is considered a direct connector.)

Indirect Connectors

Indirect connectors are used to transport entries stored in external data sources that use protocol not directly accessible by the Join Engine. The indirect connectors manage the process, transforming the data using rules and filters. (The indirect connector rules include Attribute Flow Rules, Default Attribute Value Rules and Filter Rules.) Meta-Directory supports the following indirect connectors:

Universal Connector and Universal Text Parser

The Universal connector (also known as the Universal Text Connector or UTC) is an indirect connector that enables the transfer of data between data sources and a Connector View. The Universal Text Parser (UTP) is a set of text file parsers and generators that are used with the UTC to make certain text files [currently Comma-Separated Values (CSV) files, LDAP Data Interchange Format (LDIF) files and Name-Value Pair (NVP) files] compatible with the Connector View.

NT Domain Connector

The NT Domain connector is a Universal connector with Windows NT-specific Perl scripts and binaries that provides two-way synchronization of user and group data between a Windows NT SAM database and its Connector View.

Active Directory and Exchange Connectors

The Active Directory connector is a Universal connector with Active Directory-specific Perl scripts and binaries that provides two-way synchronization of user and group data between an Active Directory database and its Connector View.

Novell and Notes Connectors

The Novell Directory and Lotus Notes Connectors have been implemented as indirect connectors. However, unlike the existing Indirect connectors such as - Universal Text Parser, Active Directory, Microvolt Exchange and the NT Domain connectors, this connector is not UTC-based. It is based on a new connector framework introduced in V5.1. This new connector framework uses an intermediate Masque database to perform change detection and loop detection for data in Novell Directory Server or Lotus Notes.

Join Engine

The core service of Meta-Directory is the Join Engine, responsible for linking entries and controlling the flow of information from a Connector View into or out of the Meta View. The Meta View is an LDAP sub-tree where entries from one or more Connector Views are linked, stored and accessed. The Join Engine synchronizes the data by flowing it through a sequence of rules and filters which map attributes from the Connector View with corresponding attributes in the Meta View. (Mapping is the assignment of an attribute or entry in one source to link with a particular attribute or entry in another source.) The movement of this data through the sequence of rules is referred to as the join process. The Join Engine also monitors the Connector Views for changes and incorporates them into the Meta View; conversely, it monitors the Meta View for changes and incorporates them into the Connector View and back to the related external data source.

Join Process

The join process is the movement of data through a sequence of rules and filters that are used by the Join Engine to determine how Connector View entries will be represented in the Meta View. To successfully join entries, the Join Engine must match data in the Connector View with a congruous entry in the Meta View. To do this, rules containing values and attributes are issued against the Connector View. These rules find a matching entry, and create a link to it, in the Meta View. The search strings include Join Rules, Attribute Construction Definitions, Attribute Flow Rules, Filters, and DN Mapping Rules.

Meta-Directory Views

In connecting data from several data sources, Meta-Directory allows the information to be accessed in two ways:

The following sections describe these views in more detail.

Meta View

The Meta View is a unified view of LDAP entries from one or more Connector Views, representing the result of the Join Engine’s join process. After the Join Engine receives information from a Connector View, it synchronizes the information in the Meta View.

From the Meta View, you can view the linked entries as well as modify them and send the modifications back to the original Connector Views. Meta-Directory supports only one Meta View per Join Engine.

Connector Views

A Connector View is an LDAP representation of an entry (or entries) that resides in an external data source. This representation is merged with other Connector Views to form the Meta View. In order for this merger to take effect, you must specify that a Connector View is a participating view. Adding a participating view allows the Connector View to ‘participate’ in the join process; enabling it allows the data to flow from the Connector View into the Meta View. (It is through the participating view that the rules of the join process are applied.)

How Meta-Directory Works

Information from data sources is channeled to one or more Connector Views via a direct or indirect connector. The Join Engine combines the data from the Connector Views into one Meta View. All the information in the Meta View is then accessible via a directory server and other web-based applications. This is how the process plays itself out:

  1. The Join Engine works with direct and indirect connectors that channel data from external sources into a Directory Server Connector View.
    1. The direct connectors read entries from either an LDAP directory or an Oracle database and map the data into LDAP-configured Connector Views.
    2. For other sources of data, an indirect connector transforms information from a proprietary format into LDAP and flows this data into an LDAP-configured Connector View.
    3. The data in these LDAP-configured Connector Views can then be flowed into, and stored on, a Meta View (another directory subtree in a Directory Information Tree) via the direct LDAP connector.

  2. The Meta View becomes the replicated source for the combined data, allowing searches and changes to be made and flowed back to the original source.
  3. Figure 1-1  Data Integration into Meta-Directory
    This figure is a block diagram representing the process of data integration into Meta-Directory.

Previous      Contents      Index      Next     

Copyright 2004 Sun Microsystems, Inc. All rights reserved.