- Book Information
- Index
- Preface
- Part I Directory Server Administration
- Chapter 1 Directory Server Tools
- Chapter 2 Directory Server Instances and Suffixes
- Chapter 3 Directory Server Configuration
- Displaying the Configuration of Directory Server Instance
- Modifying the Configuration Using DSCC
- Modifying the Configuration From the Command Line
- Modifying the dse.ldif File
- Configuring Administration Users
- Protecting Configuration Information
- Configuring DSCC
- Changing Directory Server Port Numbers
- Configuring DSML
- Setting the Server as Read-Only
- Configuring Memory
- Setting Resource Limits For Each Client Account
- Chapter 4 Directory Server Entries
- Managing Entries
- Managing Entries Using DSCC
- Managing Entries Using Directory Editor
- Managing Entries ldapmodify and ldapdelete
- To Move or Rename an Entry Using ldapmodify
- Guidelines and Limitations for Using the Modify DN Operation
- Setting Referrals
- Checking Valid Attribute Syntax
- Tracking Modifications to Directory Entries
- Encrypting Attribute Values
- Managing Entries
- Chapter 5 Directory Server Security
- Using SSL With Directory Server
- Managing Certificates
- To View the Default Self-Signed Certificate
- To Manage Self-Signed Certificates
- To Request a CA-Signed Server Certificate
- To Add the CA-Signed Server Certificate and the Trusted CA Certificate
- To Renew an Expired CA-Signed Server Certificate
- To Export and Import a CA-Signed Server Certificate
- Configuring the Certificate Database Password
- Backing Up and Restoring the Certificate Database for Directory Server
- Configuring SSL Communication
- Configuring Credential Levels and Authentication Methods
- Configuring LDAP Clients to Use Security
- Using SASL DIGEST-MD5 in Clients
- Using Kerberos SASL GSSAPI in Clients
- To Configure Kerberos V5 on a Host
- To Specify SASL Options for Kerberos Authentication
- Example Configuration of Kerberos Authentication
Using GSSAPI With SASL
- Assumptions for This Example
- All Machines: Edit the Kerberos Client Configuration File
- All Machines: Edit the Administration Server ACL Configuration File
- KDC Machine: Edit the KDC Server Configuration File
- KDC Machine: Create the KDC Database
- KDC Machine: Create an Administration Principal and Keytab
- KDC Machine: Start the Kerberos Daemons
- KDC Machine: Add Host Principals for the KDC and Directory Server Machines
- KDC Machine: Add an LDAP Principal for the Directory Server
- KDC Machine: Add a Test User to the KDC
- Directory Server Machine: Install the Directory Server
- Directory Server Machine: Configure the Directory Server to Enable GSSAPI
- Directory Server Machine: Create a Directory Server Keytab
- Directory Server Machine: Add a Test User to the Directory Server
- Directory Server Machine: Get a Kerberos Ticket as the Test User
- Client Machine: Authenticate to the Directory Server Through GSSAPI
- Pass-Through Authentication
- Chapter 6 Directory Server Access Control
- Creating, Viewing, and Modifying ACIs
- Access Control Usage Examples
- Granting Anonymous Access
- Granting Write Access to Personal Entries
- Granting Access to a Certain Level
- Restricting Access to Key Roles
- Granting a Role Full Access to an Entire Suffix
- Granting a Group Full Access to a Suffix
- Granting Rights to Add and Delete Group Entries
- Allowing Users to Add or Remove Themselves From a Group
- Granting Conditional Access to a Group or Role
- Denying Access
- Proxy Authorization
- Setting a Target Using Filtering
- Defining Permissions for DNs That Contain a Comma
- Viewing Effective Rights
- Advanced Access Control: Using Macro ACIs
- Logging Access Control Information
- Client-Host Access Control Through TCP Wrapping
- Chapter 7 Directory Server Password Policy
- Chapter 8 Directory Server Backup and Restore
- Chapter 9 Directory Server Groups, Roles, and CoS
- Chapter 10 Directory Server Replication
- Planning Your Replication Deployment
- Recommended Interface for Configuring and Managing Replication
- Summary of Steps for Configuring Replication
- Enabling Replication on a Dedicated Consumer
- Enabling Replication on a Hub
- Enabling Replication on a Master Replica
- Configuring the Replication Manager
- Creating and Changing Replication Agreements
- Fractional Replication
- Replication Priority
- Initializing Replicas
- Indexing Replicated Suffixes
- Incrementally Adding Many Entries to Large Replicated Suffixes
- Replication and Referential Integrity
- Replication Over SSL
- Replication Over a WAN
- Modifying the Replication Topology
- Replication With Releases Prior to Directory Server 6.1
- Using the Retro Change Log
- Getting Replication Status
- Solving Common Replication Conflicts
- Chapter 11 Directory Server Schema
- Chapter 12 Directory Server Indexing
- Chapter 13 Directory Server Attribute Value Uniqueness
- Chapter 14 Directory Server Logging
- Chapter 15 Directory Server Monitoring
- Part II Directory Proxy Server Administration
- Chapter 16 Directory Proxy Server Tools
- Chapter 17 Directory Proxy Server Instances
- Chapter 18 Directory Proxy Server Configuration
- Chapter 19 Directory Proxy Server Certificates
- Default Self-Signed Certificate
- Creating, Requesting and Installing Certificates for Directory Proxy Server
- Renewing an Expired CA-Signed Certificate for Directory Proxy Server
- Listing Certificates
- Adding a Certificate From a Back-End LDAP Server to the Certificate Database on Directory Proxy Server
- Exporting a Certificate to a Back-End LDAP Server
- Backing Up and Restoring a Certificate Database for Directory Proxy Server
- Prompting for a Password to Access the Certificate Database
- Chapter 20 LDAP Data Sources and Data Source Pools
- Chapter 21 Directory Proxy Server Load
Balancing and Client Affinity
- Configuring Load Balancing
- To Select a Load Balancing Algorithm
- To Configure Weights for Load Balancing
- Example Configurations for Load Balancing
- To Configure the Proportional Algorithm for Load Balancing
- To Configure the Saturation Algorithm for Load Balancing
- To Configure the Operational Affinity Algorithm for Global Account Lockout
- To Configure Operational Affinity Algorithm for Cache Optimization
- To Configure the Failover Algorithm for Load Balancing
- Configuring Client Affinity
- Configuring Load Balancing
- Chapter 22 Directory Proxy Server Distribution
- Creating and Configuring LDAP Data Views
- Renaming Attributes and DNs
- Configuring excluded-subtrees and alternate-search-base-dn
- Creating and Configuring Data Views for Example Use
Cases
- Default Data View
- Data Views That Route All Requests, Irrespective of the Target DN of the Request
- Data Views That Route Requests When a List of Subtrees Is Stored on Multiple, Data-Equivalent Data Sources
- Data Views That Provide a Single Point of Access When Different Subtrees Are Stored in Different Data Sources
- Data Views That Provide a Single Point of Access When Different Parts of a Subtree Are Stored in Different Data Sources
- Data Views That Provide a Single Point of Access When Superior and Subordinate Subtrees Are Stored in Different Data Sources
- Data Views With Hierarchy and a Distribution Algorithm
- Chapter 23 Directory Proxy Server Virtualization
- Creating and Configuring LDIF Data Views
- Configuring Virtual Data Transformations
- Creating and Configuring Join Data Views
- Creating and Configuring JDBC Data Views
- Defining Access Control on Virtual Data Views
- Defining Schema Checking on Virtual Data Views
- Sample Virtual Configurations
- Joining an LDAP Directory and a MySQL Database
- Joining Multiple Disparate Data
Sources
- Data Storage Scenario
- Client Application Requirements
- Aggregate Data From the HR LDAP Directory and the Administration LDIF File
- Add Data From Company 22 to Example.Com's DIT by Renaming the DN
- Add Company 22's Data to the HR Data
- Enable LDAP Clients to Access the Payroll Data in an SQL Database
- Add Virtual Access Control
- Chapter 24 Connections
Between Directory Proxy Server and Back-End LDAP Servers
- Configuring Connections Between Directory Proxy Server and Back-End LDAP Servers
- Configuring SSL Between Directory Proxy Server and Back-End LDAP Servers
- Choosing SSL Ciphers and SSL Protocols for Directory Proxy Server
- Forwarding Requests to Back-End LDAP Servers
- Chapter 25 Connections Between Clients and Directory Proxy Server
- Chapter 26 Directory Proxy Server Client Authentication
- Chapter 27 Directory Proxy Server Logging
- Chapter 28 Directory Proxy Server Monitoring and Alerts