Chapter 2 Quick Start

Install Meta-Directory and its components.

Meta-Directory is used to establish an interdependent relationship between two or more sources of data, allowing the data to be integrated, viewed, searched and/or modified from one authoritative source. The components used to join the data include the Join Engine and connectors (both direct and indirect). During installation, you will be asked to choose a Directory Server and a path to a directory on the Directory Server where the Meta-Directory configuration will be stored. For more information on installation, see the Sun ONE Meta-Directory Installation Guide.

Start Sun ONE Console, your server group’s Administration Server and your external data source.

Sun ONE Administration Services, that includes Sun ONE Administration Server and Sun ONE Console, was installed along with Meta-Directory. Sun ONE Administration Server (accessed through Administration Server Console) is the common front-end for all Sun ONE Servers. Sun ONE Console manages all installed Sun ONE server groups. For instance, you might install Directory Server in one directory tree and Meta-Directory in another. Each server group will have its own Administration Server but, Sun ONE Console allows the management of both server groups from a single graphical user interface. Similarly, you access Meta-Directory from Sun ONE Console although the initial Meta-Directory configuration (Step 3 and Step 4) is achieved through Sun ONE Console. For more information on Console windows and applications, see Chapter 4, "Console Interface" or the Sun ONE Console and Administration Server documentation set.

Create an instance of the Join Engine.

The Join Engine manages the flow and integration of data from different sources into one Meta View. An instance of the Join Engine needs to be configured to create the Meta View. The URL of the Directory Server where the Meta View will be located as well as an authenticating DN and password are needed for instance creation. Once the instance is created, a Meta View is created automatically in the navigation tree of Meta-Directory Console. The instance is created from Sun ONE Console and Meta-Directory Console can be opened from the instance in Sun ONE Console. For more information on the Join Engine, see Chapter 5, “Configuring the Join Engine” of the Administration Guide.

Connect one or more sources of external data to Meta-Directory by creating one or more instances of a server.

An indirect or direct connector is used to flow data from the external data source to the Connector View. Connectors allow information to flow in two directions: original or modified data can move from the data source to the Connector View and modified data can flow from the Connector View back to the data source. You associate external data with a Connector View in one of two ways:

Create an instance of an indirect connector, configure and apply the indirect connector rules and start the instance.

Any external data source that goes through the process of having its data transformed into LDAP before flowing through the Join Engine is considered to have an indirect connection to the Join Engine. Active Directory, NT Domain and Universal Text Parser are indirect connectors which translate proprietary data into LDAP. When an instance of one of these indirect connectors is created (from Sun ONE Console, not Meta-Directory Console), it links to an external data source and creates a Connector View on a Directory Server with which to view the data. Starting the indirect connector instance begins the flow of data from the external data source to the Connector View. (It is important to remember that creation of the instance does not flow data; it only opens a data path.)

Meta-Directory provides rules to manage the flow of data from the external data source through the indirect connector and to the Connector View. These indirect connector rules can alter the flow in three ways: by filtering entries from the process, by setting entry ownership, and by matching attributes in the data source to attributes in the Connector View. Other indirect connector configuration choices include setting up log options, scheduling synchronization, choosing from available attributes, and, in the case of the Universal connector only, adapting the connector with a Perl script to help it to synchronize a proprietary data source. Indirect connector rules are configured at the connector level on the navigation tree but are applied to specific connectors separately.

Create a direct Connector View and start it.

The Join Engine allows access to LDAP Directory Servers and Oracle databases within its architecture; these data sources are considered to have a direct connection. A direct connector is not needed; only a Connector View need be created. (As there is no connector, the indirect connector rules do not apply either.)

To create a direct Connector View, a Directory Server or an Oracle database needs to be recognized by the Join Engine. You configure a Directory Server by inputting address information (host name, port, DN name and password), scheduling operation and data modification times and setting up binary attributes. An Oracle database is also configured with database address information with the addition of changelog scripts, operation and data modification times and column selections. Once the Data Servers are connected to Meta-Directory, the direct Connector View can be instantiated by pointing it to the server.

Define the join process rules.

The key to managing the manipulation of data from the Connector View to the Meta View is the join process. This process is the flow of data through the Join Engine and the data’s synchronization within the Meta View. Administrators write join process rules to take full advantage of Meta-Directory’s synchronization tools. There are five types of rules: join rules, attribute flow rules, DN mapping rules, filters and attribute construction rules. (Don’t confuse these rules with the similarly-named indirect connector rules which manage the flow of data between the external data source and the Connector View.) Generally, these rules decide which entries (or attributes) from the Connector View will exist in the Meta View. Specifically, the administrator can, among other things, prevent specific entries from flowing back and forth and specify which attribute values in the Connector View map to which attribute values in the Meta View.

The join process rules written at this step will not actually manage the data until they are specifically applied to a participating view in Step 6.

Configure a participating view and apply the join process rules.

A participating view must be added before data will flow from the Connector View into the Meta View. Once added and enabled, the participating view is telling the Join Engine that the corresponding Connector View is ‘participating’ in the data flow. Applying the join process rules to the participating view will manage data flow between the Connector View and Meta View.

The previously-configured join process rules are applied to the participating view after it has been added to the navigation tree. If no rules have been configured, the participating view uses Atomic rules. (The Atomic rules are a set of default DN Mapping rules and Attribute Flow rules that allow data to flow in the absence of previously-configured join process rules.) In addition to the join process rules, the direction of data flow, a data refresh schedule and data refresh filters can be applied to a participating view.

Start the Join Engine.

The Join Engine is started from either Sun ONE Console or Meta-Directory Console. Even when the Join Engine is started, data will not flow until the participating view and the Connector View are enabled.

Enable the participating view.

The participating view is enabled from the Join Engine’s Operations window in Meta-Directory Console. When you enable the participating view, its Connector View will flow data into the Meta View, using the join process rules applied to it.

Ensure that the Connector View is enabled.

By default, the Connector View is always enabled so data flow from the external source to the Meta View is always possible, providing the prior eight steps have been executed correctly. The Connector View’s status can be verified from the connector’s Operations window in Meta-Directory Console.

Refresh the data.

Refreshing the data ensures that the most recent data is flowing. This step is most important when changes and modifications have been made to data.

Shows how the Meta-Directory navigation tree appears if you were to create a Universal connector and its corresponding Connector View, then enabled it as a participating view.

Figure 2-1 Meta-Directory Navigation Tree With a Configured Connector View
Figure shows the tree view of the Meta-Directory structure. It also shows a configured Connector View.