Index DocHome Next |
iPlanet Directory Server Access Management Edition Administration Guide |
Contents
What You Are Expected to Know
iPlanet Directory Server Access Management Edition Documentation Set
Organization of This Guide
Documentation Conventions Used in This Guide
Typographic Conventions
Related Information
Terminology
Chapter 1 Product OverviewDirectory Server Access Management Edition
Features of DSAME
Service Management
Installing DSAME
Policy Management
Authentication
Single Sign-On
URL Policy Agents
User Management
DSAME Console
The DSAME Console
Location Pane
Navigation Pane
Data Pane
Chapter 2 Service ManagementDefinition of a Service
DSAME Services Defined
Administration
Attribute Types
Authentication
Core
Logging
Anonymous
Certificate-based
LDAP
Membership (Self-Registration)
RADIUS
Naming
Platform
Session
URL Policy Agent
User
Dynamic Attributes
Service Management
Policy Attributes
User Attributes
Organization Attributes
Global Attributes
Chapter 3 Policy ManagementThe Policy Service
The URL Policy Agent
Validating a User's Sign On
Hierarchy Of Enforcement
Enforcing URL Access
How the URL Policy Agent Works
Policy Management
Registering Policy Services
Creating Named Policies
Assigning Named Policies
Assigning Named Policies to an Organization
Assigning Named Policies to a Role
Chapter 4 User ManagementThe User Management Interface
User Management View
Managing DSAME Objects
User Profile View
Organizations
Properties Function
Create an Organization
Containers
Create a Container
People Containers
Delete a Container
Create a People Container
Group Containers
Delete a People Container
Create a Group Container
Roles
Delete a Group Container
Create a Role
Services
Delete a Role
Add Users to a Role
Remove Users from a Role
Register a Service
Policies
Create a Template for a Service
Unregister a Service
Assign a Policy
Users
Unassign a Policy
Create a User
Managed Groups
Delete a User
Create a Managed Group
Delete a Managed Group
Chapter 5 Authentication OptionsThe Core Authentication Service
To Register and Enable the Core Service
Anonymous Authentication
To Register and Enable Anonymous Authentication
Certificate-based Authentication
Logging In Using Anonymous Authentication
To Register and Enable Certificate-based Authentication
LDAP Directory Authentication
Logging In Using Certificate-based Authentication
To Register and Enable LDAP Authentication
Membership Authentication
Logging In Using LDAP Authentication
Enabling LDAP Authentication Failover
To Register and Enable Membership Authentication
RADIUS Server Authentication
Logging In Using Membership Authentication
To Register and Enable RADIUS Authentication
Logging In Using RADIUS Authentication
Chapter 6 Administration AttributesGlobal Attributes
Default Role Permissions (ACIs)
Organization Attributes
Organization Admin
Dynamic Admin Roles ACIs
Organization Help Desk Admin
Group Admin
Show People Containers
Organization Admin
Organization Help Desk Admin
People Container Admin
Organizational Unit Admin
Organizational Unit Help Desk Admin
Top Level Admin
Display Containers In Menu
Show Group Containers
Managed Group Type
Service Hierarchy
Groups Default People Container
Maximum Results Returned From Search
Timeout For Search (sec.)
Groups People Container List
Display User's Roles
Display User's Groups
User Group Self Subscription
User Profile Display Options
User Creation Default Roles
View Menu Entries
Chapter 7 Anonymous Authentication AttributesAuthentication Level
Valid Anonymous User List
Default Anonymous User Name
Chapter 8 Certificate Authentication AttributesMatch Certificate in LDAP
SSL On For LDAP Access
Field in Cert to Use to Access User Profile
Authentication Level
Match Certificate to CRL
LDAP Server and Port
LDAP Start Search DN
LDAP Access Authentication Type
LDAP Server Principal User
LDAP Server Principal Password
LDAP Attribute for Profile ID
Chapter 9 Core Authentication AttributesOrganization Attributes
Authentication Menu
Global Attributes
Non-Interactive Modules
User's Default Redirect URL
User Based Auth
People Container For All Users
Alias Search Attribute Name
Default Auth Level
User Naming Attribute
Pluggable Auth Page Generator Class
Dynamic User Profile Creation
Default Auth Locale
Organization URL Mapping
Admin Authenticator
Dynamic User Profile Creation Default Roles
Authentication Chaining Modules
Authentication Chaining Enabled
Persistent Cookie Mode
Persistent Cookie Max Time (seconds)
Pluggable Auth Module Classes
Chapter 10 LDAP Authentication AttributesPrimary LDAP Server and Port
Secondary LDAP Server and Port
DN to Start User Search
DN for Root User Bind
Password for Root User Bind
Search Filter
User Entry Naming Attribute
Search Scope
Enable SSL to LDAP Server
Authentication Level
Chapter 11 Membership Authentication AttributesMinimum Password Length
User Naming Attribute
Search Scope
Enable SSL to LDAP Server
Primary LDAP Authentication Server
Secondary LDAP Authentication Server
Authentication Level
Default User Roles
User Status After Registration
DN to Start User Search
DN for Root User Bind
Password for Root User Bind
Search Filter
Chapter 12 RADIUS Authentication AttributesRADIUS Server 1
RADIUS Server 2
RADIUS Shared Secret
RADIUS Server's Port
Authentication Level
Timeout (Seconds)
Chapter 13 Logging AttributesLog Status
Max Log Size
Number of History Files
Log Location
Chapter 14 Naming AttributesProfile Service URL
Session Service URL
Logging Service URL
Chapter 15 Platform AttributesServer List
Platform Locale
Cookie Domains
Login Service URL
Logout Service URL
Available Locales
Chapter 16 Session AttributesMax Session Time (Minutes)
Max Idle Time (Minutes)
Max Caching Time (Minutes)
Chapter 17 URL Policy Agent AttributesURL Policy Agent Action: Allow
URL Policy Agent Action: Deny
URL Policy Agent Action: Not Enforced
Additional Information
Hierarchy Of Enforcement
Configuring Policy Attributes
Chapter 18 User AttributesService Management Attributes
User Preferred Language
User Profile Attributes
User Preferred Timezone
User Preferred Locale
Admin DN Starting View
Default User Status
User Auth Modules
Home Address
Unique User IDs
User Status
First Name
Last Name
Full Name
Password
Confirm Password
Email Address
Employee Number
Telephone Number
Roles For This User
Groups for this User
Index DocHome Next
Copyright © 2001 Sun Microsystems, Inc. Some preexisting portions Copyright © 2001 Netscape Communications Corp. All rights reserved.
Last Updated December 12, 2001