Netscape Directory Server Deployment Guide

Complete Contents
Introduction
Chapter 1 Welcome to the Directory Server
Chapter 2 Directory Deployment Overview
Chapter 3 Planning Your Directory Data
Chapter 4 Planning Directory Schema
Chapter 5 Planning Security Policies
Chapter 6 Directory Tree Design
Chapter 7 Planning Replication
Chapter 8 Planning Referrals
Chapter 9 Directory Design Examples
Chapter 10 Extending Your Directory Service
Appendix A Quick Start

Contents

Index

	Contents

	Introduction
	What Is in This Book?
	Conventions Used in This Book

Chapter 1	Welcome to the Directory Server
	About the Enterprise
	What Is a Directory Service?
	N+1 Directory Services
	Global Directory Services
	LDAP
	The Netscape Directory Server
	Client-Server Architecture
	Server-Side Architecture
	Directory Server Concepts
	The Directory Tree
	Distinguished Names
	Suffix
	Root Entry
	Directory Manager
	Base Distinguished Name
	Secure Sockets Layer

Chapter 2	Directory Deployment Overview
	Directory Design Activities Overview
	Deployment Advice

Chapter 3	Planning Your Directory Data
	Data Planning Overview
	Introduction to Directory Data
	Examples of Directory Data
	What Your Directory Should Not Include
	Data Planning
	Performing the Site Survey
	Analyzing Your Site Survey
	Data Mastering
	Data Mastering for Replication
	Data Mastering Across Multiple Applications
	Data Ownership
	Determining Data Access
	Documenting Your Site Survey
	Directory Schema Design

Chapter 4	Planning Directory Schema
	Directory Data Representation Overview
	Object Classes
	Standard Object Classes
	Inheritance
	Attributes
	Required Versus Optional Attributes
	A Note About Attribute Values
	Schema Checking
	Customizing the Schema
	When You Should Extend Your Schema
	When to Add New Object Classes and Attributes
	Object Class Strategies
	A Consistent Schema
	Schema Extension Frequently Asked Questions

Chapter 5	Planning Security Policies
	Security Policy Overview
	Directory Access Rules
	User Authentication
	Certificate-Based Authentication
	Authenticating Using Directory Server for NT
	Anonymous Access
	Directory Manager Authentication
	Access Control Lists
	Setting Permissions
	The Precedence Rule
	Allowing or Denying Access
	When to Explicitly Deny Access
	Where to Place Access Control Rules
	Using Filtered Access Control Rules
	The ACI Format
	Targets
	Permissions
	Bind Rules
	Using ACIs: Some Hints and Tricks
	Creating a Security Policy
	Planning Your Groups
	Group Usage Advice
	Determining General Directory Access
	Determining Points of Access

Chapter 6	Directory Tree Design
	Directory Tree Overview
	Multiple Suffixes
	Planning Your Directory Suffix(es)
	Selecting a Suffix
	Using Multiple Suffixes: ISPs
	Using Multiple Suffixes: Large Enterprises and Extranets
	Branching Your Directory Tree
	Branch Point Distinguished Name Attributes
	Branching Strategies
	Branching to Support Replication or Referrals
	Branching to Support Access-Control
	Branching to Support International Enterprises
	Naming Person Entries
	Naming Non-Person Entries

Chapter 7	Planning Replication
	Replication Overview
	Supplier Servers
	Consumer Servers
	Replicating Directory Trees
	Cascading Replicas
	Subtree Replication
	Multiple Subtree Replication
	Initiating Replication
	Directory Entries used to Support Replication
	Supplier-Initiated Replication
	Consumer-Initiated Replication
	Building a Highly Available Directory Service
	Using Replication for High Availability
	Using Replication for Load Balancing
	Load Balancing the Server
	Load Balancing the Network
	Using Replication for Local Availability
	Determining Your Replication Strategy
	Example: Load Balancing a Small Site
	Example: Load Balancing a Large Site
	Example: Load Balancing for Local Management
	Example: Load Balancing for Server Traffic
	Example: Replicating for Messaging 3.0

Chapter 8	Planning Referrals
	Referral Overview
	Smart Referrals
	Smart Referral Usages
	How You Should Use Smart Referrals
	LDAP Client Referral Handling
	Netscape Client Referral Handling

Chapter 9	Directory Design Examples
	A Small Organization
	A State Government
	An International Corporation
	Single Suffix, Global Directory Tree Replication
	Single Suffix, Local Data Management
	Multiple Suffixes, Local Data Management
	Enabling the Extranet

Chapter 10	Extending Your Directory Service
	Building Custom Tools for Data Migration
	Building Custom LDAP Clients
	The LDAP C and Java SDKs
	Writing Server Plug-Ins

Appendix A	Quick Start
	A Word of Advice
	Planning Your Suffix Value
	Directory Tree Advice
	DN Advice
	Configuration Directory Advice
	Creating Directory Entries
	For More Information