Contents

List of Figures

Title and Copyright Information

Preface

• Who Should Use This Book
• How This Book Is Organized
• Oracle Directory Server Enterprise Edition Documentation Set
• Related Reading
• Redistributable Files
• Default Paths and Command Locations
• Typographic Conventions
• Shell Prompts in Command Examples
• Symbol Conventions
• Documentation, Support, and Training
• Oracle Software Resources
• Documentation Accessibility

1 Overview of Directory Server Enterprise Edition

• 1.1 About Directory Server Enterprise Edition
  • 1.1.1 Quality of Service Requirements for a Robust Directory Service
• 1.2 Directory Server Enterprise Edition Components and Their Capabilities
  • 1.2.1 Directory Server
    • 1.2.1.1 Directory Server and Security
    • 1.2.1.2 Directory Server and Availability
    • 1.2.1.3 Directory Server and Scalability
    • 1.2.1.4 Directory Server and Serviceability
  • 1.2.2 Directory Proxy Server
    • 1.2.2.1 Directory Proxy Server and Availability
    • 1.2.2.2 Directory Proxy Server and Security
  • 1.2.3 Directory Service Control Center
  • 1.2.4 Identity Synchronization for Windows
  • 1.2.5 Directory Server Resource Kit
• 1.3 DSEE Administration Model
• 1.4 What's New at a Glance

2 Service Manageability

• 2.1 Web-Based Directory Service Management With the DSCC
  • 2.1.1 Diverse Views to Simplify Service Management
  • 2.1.2 Configuration and Suffix Cloning
• 2.2 Advanced Command-Line Interface
  • 2.2.1 Overview of the Commands
• 2.3 Simplified Installation and Migration
  • 2.3.1 Automated Installation From the Command Line
  • 2.3.2 Non-Root Installation
  • 2.3.3 User-Specified Installation Path
  • 2.3.4 Multiple Separate Installations
  • 2.3.5 Automated Migration Tool (dsmig)
• 2.4 Online Configuration Changes
• 2.5 Availability Across Your Entire Network
• 2.6 Where to Go From Here

3 High Data Availability and Integrity

• 3.1 Robust Replication
  • 3.1.1 Unlimited Masters for Replication
  • 3.1.2 Prioritized Replication
  • 3.1.3 Replicated Account Lockout Attributes
  • 3.1.4 Monitoring Replication Convergence
• 3.2 Importing Many Entries to Large Replicated Suffixes
• 3.3 Synchronized Backup and Export
• 3.4 Compacting Database Files
• 3.5 File System Snapshot of Frozen Database
• 3.6 Changing Attributes While the Server Is Online
  • 3.6.1 To Change the Data Directory Path With the Server Online
• 3.7 Attribute Syntax Validation on Update
• 3.8 Schema Validation by Directory Proxy Server
• 3.9 Where to Go From Here

4 Tuned for Performance

• 4.1 Cache Optimizations
  • 4.1.1 Setting Thresholds on Dynamic Memory Use
  • 4.1.2 Optimizing Entry Cache Memory Allocation
• 4.2 Log Management Improvements
  • 4.2.1 Time-Based Log Rotation and Deletion
  • 4.2.2 On-Demand Log Rotation
  • 4.2.3 Configurable Log File Permissions Settings
  • 4.2.4 Monitoring and Managing Persistent Searches
• 4.3 Where to Go From Here

5 Enhanced Security

• 5.1 Connection-Based Access Control
• 5.2 Directory Server Enterprise Edition Password Policy
  • 5.2.1 Managing the Password Policy Using the DSCC
  • 5.2.2 Migrating to the New Password Policy
• 5.3 Forced Password Change After Reset
• 5.4 Global Account Lockout
• 5.5 Directory Manager Enhancements
• 5.6 Simplified Password Updates With LDAP Extended Operations
• 5.7 Tracking of Last Login Time
• 5.8 Enhanced Auditing for Updates Performed Using Proxy Authorization
• 5.9 Where to Go From Here

6 Managed Scalability

• 6.1 Load Balancing and Operation-Based Routing
• 6.2 DN and Attribute Rewriting
• 6.3 Customizable Data Distribution for Faster Writes
• 6.4 Where to Go From Here

7 Virtual Directory

• 7.1 Defining a Virtual Namespace Made Up of Multiple Sources
  • 7.1.1 Access to JDBC Compliant Data Repositories
  • 7.1.2 Access to Flat LDIF File Resources
  • 7.1.3 Access to LDAP Resources
• 7.2 Aggregating Data Views to Create Virtual Entries
• 7.3 Mapping Attribute Names and Values
• 7.4 Where to Go From Here

8 Synchronizing Directory Server With Windows Users and Groups

• 8.1 Account Synchronization
• 8.2 Group Synchronization With Active Directory
• 8.3 Failover Support for Multi-master Replicas
• 8.4 Integrated Administration Server Support for Windows Synchronization
• 8.5 Where to Go From Here

A Standards and RFCs Supported by Directory Server Enterprise Edition

Index