JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Directory Server Enterprise Edition Deployment Planning Guide 11g Release 1 (11.1.1.5.0)
search filter icon
search icon

Document Information

Preface

Part I Overview of Deployment Planning for Directory Server Enterprise Edition

1.  Introduction to Deployment Planning for Directory Server Enterprise Edition

2.  Business Analysis for Directory Server Enterprise Edition

Part II Technical Requirements

3.  Usage Analysis for Directory Server Enterprise Edition

4.  Defining Data Characteristics

5.  Defining Service Level Agreements

6.  Tuning System Characteristics and Hardware Sizing

7.  Identifying Security Requirements

8.  Identifying Administration and Monitoring Requirements

Part III Logical Design

9.  Designing a Basic Deployment

10.  Designing a Scaled Deployment

11.  Designing a Global Deployment

12.  Designing a Highly Available Deployment

Part IV Advanced Deployment Topics

13.  Using LDAP-Based Naming With Solaris

14.  Deploying a Virtual Directory

15.  Designing a Deployment With Synchronized Data

Index

Preface

The Oracle Fusion Middleware Deployment Planning Guide for Oracle Directory Server Enterprise Edition 11g Release 1 (11.1.1.5.0) contains the information that you need to plan a directory service deployment. This guide describes the initial decisions that you need to make on issues such as data types, access control, and sizing. It also provides high-level examples and strategies that you can use for the specific requirements of your enterprise.

Who Should Use This Book

This guide is primarily intended for deployment architects and business planners responsible for the analysis and design of directory service deployments. This guide is also useful for system integrators and other people responsible for the design and implementation of enterprise applications.

Before You Read This Book

This guide assumes that you are familiar with the basic concepts of LDAP directory servers and that you have read these documents:

How This Book Is Organized

This guide is based on a solution life cycle that describes the various phases of deployment planning.

Part I provides an introduction to Directory Server Enterprise Edition and explains the steps involved in planning a deployment (solution life cycle).

Part II describes the technical requirements analysis that must be performed before you can begin drawing up a logical deployment architecture. Technical requirements analysis requires an understanding of the business domain, business objectives, and the underlying system technology.

Part III describes how to create logical architectures for Directory Server Enterprise Edition deployments. It also provides sample logical architectures based on typical Directory Server Enterprise Edition deployment scenarios.

Part IV discusses specialized deployment topics including the use of LDAP-based naming services on the Solaris Operating System, Identity Synchronization for Windows, and the deployment of a virtual directory.

Oracle Directory Server Enterprise Edition Documentation Set

This documentation set explains how to use Oracle Directory Server Enterprise Edition to evaluate, design, deploy, and administer directory services. In addition, it shows how to develop client applications for Directory Server Enterprise Edition. The Directory Server Enterprise Edition documentation set is available at http://download.oracle.com/docs/cd/E20295_01/index.htm.

The following table lists the documents that make up the Directory Server Enterprise Edition documentation set.

Table P-1 Directory Server Enterprise Edition Documentation

Document Title
Contents
Contains the latest information about Directory Server Enterprise Edition, including known problems.
Introduces the key features of this release. Demonstrates how these features work and what they offer in the context of a deployment that you can implement on a single system.
Explains how to plan and design highly available, highly scalable directory services based on Directory Server Enterprise Edition. Presents the basic concepts and principles of deployment planning and design. Discusses the solution life cycle, and provides high-level examples and strategies to use when planning solutions based on Directory Server Enterprise Edition.
Explains how to install the Directory Server Enterprise Edition software. Shows how to configure the installed software and verify the configured software.
Provides instructions for upgrading versions 11.1.1.3, 7.x, and 6 installations, and instructions for migrating version 5.2 installations.
Provides command-line instructions for administering Directory Server Enterprise Edition.

For hints and instructions about using the Directory Service Control Center, DSCC, to administer Directory Server Enterprise Edition, see the online help provided in DSCC.

Introduces technical and conceptual foundations of Directory Server Enterprise Edition. Describes its components, architecture, processes, and features.
Describes the command-line tools, schema objects, and other public interfaces that are available through Directory Server Enterprise Edition. Individual sections of this document can be installed as online manual pages.
Shows how to develop directory client applications with the tools and APIs that are provided as part of Directory Server Enterprise Edition.
Provides information for defining the scope of the problem, gathering data, and troubleshooting the problem areas by using various tools.
Provides general guidelines and best practices for planning and deploying Identity Synchronization for Windows.
Describes how to install and configure Identity Synchronization for Windows.
Provides installation instructions for Identity Synchronization for Windows 6.0 SP1.

For an introduction to Directory Server Enterprise Edition, review the following documents in the order in which they are listed.

Figure P-1 ODSEE Documentation Map

image:Text-based flowchart to help you determine which documents to read before installing ODSEE.

Related Reading

The SLAMD Distributed Load Generation Engine is a Java application that is designed to stress test and analyze the performance of network-based applications. This application was originally developed by Sun Microsystems, Inc. to benchmark and analyze the performance of LDAP directory servers. SLAMD is available as an open source application under the Sun Public License, an OSI-approved open source license. To obtain information about SLAMD, go to http://www.slamd.com/. SLAMD is also available as a java.net project. See https://slamd.dev.java.net/.

Java Naming and Directory Interface (JNDI) supports accessing the Directory Server using LDAP and DSML v2 from Java applications. For information about JNDI, see http://www.oracle.com/technetwork/java/jndi/index.html. The JNDI Tutorial contains detailed descriptions and examples of how to use JNDI. This tutorial is at http://download.oracle.com/javase/jndi/tutorial/.

Identity Synchronization for Windows uses Message Queue with a restricted license. Message Queue documentation is available at http://www.oracle.com/technetwork/indexes/documentation/index.html.

Identity Synchronization for Windows works with Microsoft Windows password policies.

Redistributable Files

Directory Server Enterprise Edition does not provide any files that you can redistribute.

Default Paths and Command Locations

This section explains the default paths used in documentation, and provides locations of commands on different operating systems and deployment types.

Default Paths

The table in this section describes the default paths that are used in this document. For complete descriptions of the files installed, see Chapter 1, Directory Server Enterprise Edition File Reference, in Oracle Directory Server Enterprise Edition Reference.

Table P-2 Default Paths

Placeholder
Description
Default Value
install-path
Represents the base installation directory for Directory Server Enterprise Edition software.
When you install from a zip distribution using unzip, the install-path is the current-directory/dsee7.

When you install from a native package distribution, the default install-path is /opt/SUNWdsee7.

instance-path
Represents the full path to an instance of Directory Server or Directory Proxy Server.

Documentation uses /local/dsInst/ for Directory Server and /local/dps/ for Directory Proxy Server.

No default path exists. Instance paths must nevertheless always be found on a local file system.

On Solaris systems, the /var directory is recommended:

serverroot
Represents the parent directory of the Identity Synchronization for Windows installation location
Depends on your installation. Note that the concept of a serverroot no longer exists for Directory Server and Directory Proxy Server.
isw-hostname
Represents the Identity Synchronization for Windows instance directory
Depends on your installation
/path/to/cert8.db
Represents the default path and file name of the client’s certificate database for Identity Synchronization for Windows
current-working-dir/cert8.db
serverroot/isw-hostname/logs/
Represents the default path to the Identity Synchronization for Windows local log files for the System Manager, each connector, and the Central Logger
Depends on your installation
serverroot/isw-hostname/logs/central/
Represents the default path to the Identity Synchronization for Windows central log files
Depends on your installation

Command Locations

The table in this section provides locations for commands that are used in Directory Server Enterprise Edition documentation. To learn more about each of the commands, see the relevant man pages.

Table P-3 Command Locations

Command
Native Package Distribution
Zip Distribution
cacaoadm
/usr/sbin/cacaoadm
Solaris, Linux, HP—UX —

install-path/bin/cacaoadm

Windows -

install-path\bin\cacaoadm.bat

certutil
/usr/sfw/bin/certutil
install-path/bin/certutil
install-path/bin/dpadm
install-path/bin/dpadm
install-path/bin/dpconf
install-path/bin/dpconf
install-path/bin/dsadm
install-path/bin/dsadm
install-path/bin/dsccmon
install-path/bin/dsccmon
install-path/bin/dsccreg
install-path/bin/dsccreg
install-path/bin/dsccsetup
install-path/bin/dsccsetup
install-path/bin/dsconf
install-path/bin/dsconf
install-path/bin/dsmig
install-path/bin/dsmig
install-path/bin/dsutil
install-path/bin/dsutil
install-path/bin/entrycmp
install-path/bin/entrycmp
install-path/bin/fildif
install-path/bin/fildif
Not provided
At the root of the unzipped zip distribution
install-path/bin/insync
install-path/bin/insync
install-path/dsrk/bin/ldapsearch
install-path/dsrk/bin/ldapsearch
install-path/bin/repldisc
install-path/bin/repldisc

Typographic Conventions

The following table describes the typographic conventions that are used in this book.

Table P-4 Typographic Conventions

Typeface
Meaning
Example
AaBbCc123
The names of commands, files, and directories, and onscreen computer output
Edit your .login file.

Use ls -a to list all files.

machine_name% you have mail.

AaBbCc123
What you type, contrasted with onscreen computer output
machine_name% su

Password:

aabbcc123
Placeholder: replace with a real name or value
The command to remove a file is rm filename.
AaBbCc123
Book titles, new terms, and terms to be emphasized
Read Chapter 6 in the User's Guide.

A cache is a copy that is stored locally.

Do not save the file.

Note: Some emphasized items appear bold online.

Shell Prompts in Command Examples

The following table shows the default UNIX system prompt and superuser prompt for shells that are included in the Oracle Solaris OS. Note that the default system prompt that is displayed in command examples varies, depending on the Oracle Solaris release.

Table P-5 Shell Prompts

Shell
Prompt
Bash shell, Korn shell, and Bourne shell
$
Bash shell, Korn shell, and Bourne shell for superuser
#
C shell
machine_name%
C shell for superuser
machine_name#

Symbol Conventions

The following table explains symbols that might be used in this book.

Table P-6 Symbol Conventions

Symbol
Description
Example
Meaning
[ ]
Contains optional arguments and command options.
ls [-l]
The -l option is not required.
{ | }
Contains a set of choices for a required command option.
-d {y|n}
The -d option requires that you use either the y argument or the n argument.
${ }
Indicates a variable reference.
${com.sun.javaRoot}
References the value of the com.sun.javaRoot variable.
-
Joins simultaneous multiple keystrokes.
Control-A
Press the Control key while you press the A key.
+
Joins consecutive multiple keystrokes.
Ctrl+A+N
Press the Control key, release it, and then press the subsequent keys.
->
Indicates menu item selection in a graphical user interface.
File -> New -> Templates
From the File menu, choose New. From the New submenu, choose Templates.

Documentation, Support, and Training

See the following web sites for additional resources:

Oracle Software Resources

Oracle Technology Network offers a range of resources related to Oracle software: