Aggregate Data From the HR LDAP Directory and the Administration LDIF File (Sun Java System Directory Server Enterprise Edition 6.2 Administration Guide)

Sun Java System Directory Server Enterprise Edition 6.2 Administration Guide

Aggregate Data From the HR LDAP Directory and the Administration LDIF File

The HR department stores information such as employee names, job start data, and job level. The administration department stores additional data such as building codes and office numbers. The client application that handles the HR data requires access to the combined data from both sources. Both data sources have a common attribute, the employeeNumber that exists in each entry.

The following diagram illustrates the requirements of the client application.

Figure 23–4 Aggregation of Data From LDAP Directory and LDIF File

Figure shows a join view of an LDAP directory and an
LDIF file

To fulfill this application requirement, a data view is created for the payroll directory and for the administration LDIF file. These two data views are then joined to provide access to the aggregated data. This common attribute enables Directory Proxy Server to aggregate the data for each user.

For simplicity, the commands used in this section assume the following information:

A Directory Proxy Server instance runs on the local host, with the default LDAP port (389).
The Directory Proxy Server instance is located at /local/myDPS.
The path to the file containing the Proxy Manager password has been set as a variable, LDAP_ADMIN_PWF. For more information about setting Directory Proxy Server environment variables, see Environment Variables in Sun Java System Directory Server Enterprise Edition 6.2 Installation Guide.
The payroll LDAP directory runs on a host named payrollHost, on port 2389.
The LDIF file used to store the administration data is named example.ldif.

To obtain the complete syntax of each command, run the command without any options. For example:

$ dpconf create-ldap-data-view
Operands are missing
Usage: dpcfg create-ldap-data-view VIEW_NAME POOL_NAME SUFFIX_DN

Create and Enable an LDAP Data View for the Payroll Directory

Create an LDAP data source for the payroll directory.

$ dpconf create-ldap-data-source payroll-directory payrollHost:2389

Create an LDAP data source pool for the payroll directory.
```
$ dpconf create-ldap-data-source-pool payroll-pool
```

Attach the payroll data source to the data source pool.

$ dpconf attach-ldap-data-source payroll-pool payroll-directory

Configure the weights of the attached data source.

$ dpconf set-attached-ldap-data-source-prop -h payrollHost -p 2389 \
payroll-pool payroll-directory add-weight:2 \
bind-weight:2 compare-weight:2 delete-weight:2 \
modify-dn-weight:2 modify-weight:2 search-weight:2

Create an LDAP data view for the payroll directory.

$ dpconf create-ldap-data-view payroll-view payroll-pool o=example.com

Enable the LDAP data view so that client requests can be routed to this data view.
```
$ dpconf set-ldap-data-view-prop payroll-view is-enabled:true
```

Restart Directory Proxy Server for the changes to take effect.
```
$ dpadm restart /local/myDPS
```

Create and Enable an LDIF Data View for the Administration Data

Create an LDIF data view for the administration data.

$ dpconf create-ldif-data-view admin-view example.ldif dc=example,dc=com

Enable the LDIF data view for the administration data.

$ dpconf set-ldif-data-view-prop admin-view is-enabled:true

Specify that the admin view contains entries that are used by more than one entry in the payroll view.
```
$ dpconf set-ldif-data-view-prop admin-view contains-shared-entries:true
```
When this property is set to TRUE, deleting an entry in the payroll data view will not result in the deletion of the shared entry in the admin data view. Adding an entry to the payroll data view will only add the entry to the secondary data view if it does not already exist.

Restart Directory Proxy Server for the changes to take effect.
```
$ dpadm restart /local/myDPS
```

Join the Payroll Data View and the Admin Data View

Create a filter join rule on the admin data view that specifies how the data should be aggregated.

The following join rule specifies that data should be joined based on the employeeNumber attribute of the user entry.
```
$ dpconf set-ldif-data-view-prop admin-view \
filter-join-rule:'employeeNumber=\${payroll-view.employeeNumber}'
```

Create a join data view that aggregates the two data views.

For the join data view, the organization uses the suffix DN dc=example,dc=com.
```
$ dpconf create-join-data-view example-join-view payroll-view admin-view \
dc=example,dc=com
```