Manuals database logo
manualsdatabase
Your AI-powered manual search engine

Netscape NETSCAPE DIRECTORY SERVER 6.01 manuals

NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. installation guide
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. About This Guide
  6. Conventions Used In This Guide
  7. Related Information
  8. preparing for a directory server installation
  9. Configuration Decisions
  10. Choosing Unique Port Numbers
  11. Deciding the User and Group for Your Netscape Servers (UNIX only)
  12. Defining Authentication Entities
  13. Determining Your Directory Suffix
  14. Determining the Location of the User Directory
  15. Determining the Administration Domain
  16. Installation Process Overview
  17. Upgrade Process
  18. Supported Platforms
  19. Hardware Requirements
  20. dsktune Utility
  21. Verifying Disk Space
  22. Tuning the System
  23. Setting File Descriptors
  24. Windows NT 4.0 Server
  25. Verifying Required System Modules
  26. Installing Third-Party Utilities
  27. Ensuring System Clock Accuracy
  28. Configuring the System Post Installation
  29. Windows 2000 Server and Advanced Server
  30. Installing Windows 2000 Server
  31. Installing Windows Service Packs and Hotfixes
  32. HP-UX 11.0 Operating System
  34. DNS and NIS Requirements (UNIX only)
  35. using express and typical installation
  36. Using Typical Installation
  37. silent installation
  38. Preparing Silent Installation Files
  39. A Typical Installation
  40. Using an Existing Configuration Directory
  41. Installing the Stand-Alone Netscape Console
  42. Silent Installation File Format
  43. General] Installation Directives
  44. Base] Installation Directives
  45. slapd] Installation Directives
  46. Optional [slapd] Installation Directives
  47. admin] Installation Directives
  48. Chapter 5 Post Installation
  49. populating the directory tree
  50. Migration Overview
  51. Migration Prerequisites
  52. Identifying Custom Schema
  53. Migration Procedure
  54. Migrating a Replicated Site
  55. Approach
  56. Running dsktune
  57. Common Installation Problems
  58. Glossary
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. About This Guide
  8. Directory Server Overview
  9. Conventions Used in This Guide
  10. introduction to directory server
  11. About Global Directory Services
  12. About LDAP
  13. Overview of Directory Server Architecture
  14. Overview of the Basic Directory Tree
  15. Directory Server Data Storage
  16. About Directory Entries
  17. Distributing Directory Data
  18. Design Process Outline
  19. Deploying Your Directory
  20. Other General Directory Resources
  21. introduction to directory data
  22. What Your Directory Might Include
  23. What Your Directory Should Not Include
  24. Performing a Site Survey
  25. Identifying the Applications that Use Your Directory
  26. Identifying Data Sources
  27. Characterizing Your Directory Data
  28. Determining Level of Service
  29. Data Mastering for Replication
  30. Determining Data Ownership
  31. Determining Data Access
  32. Documenting Your Site Survey
  33. Repeating the Site Survey
  34. Schema Design Process Overview
  35. Netscape Standard Schema
  36. Standard Attributes
  37. Standard Object Classes
  38. Mapping Your Data to the Default Schema
  39. Matching Data to Schema Elements
  40. Customizing the Schema
  41. When to Extend Your Schema
  42. Naming Attribute and Object Classes
  43. Strategies for Defining New Attributes
  44. Creating Custom Schema Files
  45. Custom Schema Best Practices
  46. Maintaining Consistent Schema
  47. Schema Checking
  48. Maintaining Consistency in Replicated Schema
  49. Other Schema Resources
  50. Introduction to the Directory Tree
  51. Designing Your Directory Tree
  52. Suffix Naming Conventions
  53. Naming Multiple Suffixes
  54. Identifying Branch Points
  55. Replication Considerations
  56. Access Control Considerations
  57. Naming Entries
  58. Naming Group Entries
  59. Naming Other Kinds of Entries
  60. About Roles
  61. Deciding Between Roles and Groups
  62. Directory Tree Design Examples
  63. Directory Tree for an ISP
  64. other directory tree resources
  65. Topology Overview
  66. Distributing Your Data
  67. About Using Multiple Databases
  68. About Suffixes
  69. About Knowledge References
  70. The Structure of an LDAP Referral
  71. About Default Referrals
  72. Tips for Designing Smart Referrals
  73. Using Chaining
  74. Deciding Between Referrals and Chaining
  75. Usage Differences
  76. Using Indexes to Improve Database Performance
  77. Evaluating the Costs of Indexing
  78. Introduction to Replication
  79. Replication Concepts
  80. Unit of Replication
  81. Change Log
  82. Replication Agreement
  83. Common Replication Scenarios
  84. Multi-Master Replication
  85. Cascading Replication
  86. Mixed Environments
  87. Defining a Replication Strategy
  88. Replication Survey
  89. Using Replication for High Availability
  90. Using Replication for Local Availability
  91. Example of Network Load Balancing
  92. Example of Load Balancing for Improved Performance
  93. Example Replication Strategy for a Small Site
  94. Using Replication with other Directory Features
  95. Replication and Database Links
  96. Schema Replication
  97. About Security Threats
  98. Unauthorized Access
  99. Denial of Service
  100. Determining Access Rights
  101. Conducting Regular Audits
  102. Overview of Security Methods
  103. Anonymous Access
  104. Simple Password
  105. Certificate-Based Authentication
  106. Proxy Authentication
  107. Designing a Password Policy
  108. User-Defined Passwords
  109. Expiration Warning
  110. Password Minimum Age
  111. Designing a Password Policy in a Replicated Environment
  112. Designing Access Control
  113. Targets
  114. Permissions
  115. Bind Rules
  116. Setting Permissions
  117. When to Deny Access
  118. Using Filtered Access Control Rules
  119. Securing Connections With SSL
  120. other security resources
  121. An Enterprise
  122. Data Design
  123. Directory Tree Design
  124. Topology Design
  125. Database Topology
  126. Replication Design
  127. Supplier Consumer Architecture
  128. Security Design
  129. Tuning and Optimizations
  131. Schema Design
  133. Server Topology
  135. Supplier Architecture
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. Table Of Contents
  8. Table Of Contents
  9. Table Of Contents
  10. Table Of Contents
  11. Table Of Contents
  12. Table Of Contents
  13. About This Reference Guide
  14. Prerequisite Reading
  15. Conventions Used In This Reference Guide
  16. Chapter 1 Introduction
  17. Directory Server Configuration
  18. Using Directory Server Command-Line Scripts
  19. LDIF Configuration Files - Location
  20. Configuration of Plug-in Functionality
  21. Configuration of Databases
  22. Migration of Pre-Directory Server 6.x Configuration Files to LDIF Format
  23. Changing Configuration Attributes
  24. Modifying Configuration Entries Using LDAP
  25. Restrictions to Modifying Configuration Entries
  26. Core Server Configuration Attributes Reference
  27. cn=config
  28. nsslapd-accesscontrol (Enable Access Control)
  29. nsslapd-accesslog-level
  30. nsslapd-accesslog-list
  31. nsslapd-accesslog-logexpirationtimeunit (Access Log Expiration Time Unit)
  32. nsslapd-accesslog-logmaxdiskspace (Access Log Maximum Disk Space)
  33. nsslapd-accesslog-logrotationtime (Access Log Rotation Time)
  34. nsslapd-accesslog-maxlogsize (Access Log Maximum Log Size)
  35. nsslapd-attribute-name-exceptions
  36. nsslapd-auditlog-list
  37. nsslapd-auditlog-logexpirationtimeunit (Audit Log Expiration Time Unit)
  38. nsslapd-auditlog-logmaxdiskspace (Audit Log Maximum Disk Space)
  39. nsslapd-auditlog-logrotationtime (Audit Log Rotation Time)
  40. nsslapd-auditlog-maxlogsize (Audit Log Maximum Log Size)
  41. nsslapd-certmap-basedn (Certificate Map Search Base)
  42. nsslapd-enquote-sup-oc (Enable Superior Object Class Enquoting)
  43. nsslapd-errorlog (Error Log)
  44. nsslapd-errorlog-level (Error Log Level)
  45. nsslapd-errorlog-list
  46. nsslapd-errorlog-logging-enabled (Enable Error Logging)
  47. nsslapd-errorlog-logminfreediskspace (Error Log Minimum Free Disk Space)
  48. nsslapd-errorlog-logrotationtimeunit (Error Log Rotation Time Unit)
  49. nsslapd-errorlog-maxlogsperdir (Maximum Number of Error Log Files)
  50. nsslapd-instancedir (Instance Directory)
  51. nsslapd-listenhost (Listen to IP Address)
  52. nsslapd-localuser (Local User)
  53. nsslapd-maxthreadsperconn (Maximum Threads Per Connection)
  54. nsslapd-plug-in
  55. nsslapd-readonly (Read Only)
  56. nsslapd-referralmode (Referral Mode)
  57. nsslapd-return-exact-case (Return Exact Case)
  58. nsslapd-rootdn (Manager DN)
  59. nsslapd-rootpwstoragescheme (Root Password Storage Scheme)
  60. nsslapd-securelistenhost
  61. nsslapd-security (Security)
  62. nsslapd-threadnumber (Thread Number)
  63. nsslapd-versionstring
  64. passwordCheckSyntax (Check Password Syntax)
  65. passwordHistory (Password History)
  66. passwordLockout (Account Lockout)
  67. passwordMaxAge (Password Maximum Age)
  68. passwordMinLength (Password Minimum Length)
  69. passwordResetFailureCount (Reset Password Failure Count After)
  70. passwordUnlock (Unlock Account)
  71. cn=changelog5
  72. nsslapd-changelogmaxage (Max Changelog Age)
  73. cn=encryption
  74. nsssl2
  75. cn=features
  76. nsslapd-state
  77. cn=mapping tree,cn=config
  78. nsDS5Flags
  79. nsDS5ReplicaChangeCount
  80. nsDS5ReplicaName
  81. nsDS5ReplicaReferral
  82. nsDS5ReplicaType
  83. description
  84. nsDS5ReplicaBindMethod
  85. nsDS5ReplicaHost
  86. nsDS5ReplicaLastInitStatus
  87. nsDS5ReplicaLastUpdateStart
  88. nsDS5ReplicaRefresh
  89. nsDS5ReplicaTransportInfo
  90. nsDS5ReplicaUpdateSchedule
  91. currentConnections
  92. backendMonitorDN
  93. nssnmplocation
  94. nssnmpmasterhost
  95. cn=uniqueid generator
  96. Overview
  97. Object Classes for Plug-in Configuration
  98. bit check Plug-in
  99. ACL preoperation Plug-in
  100. Boolean Syntax Plug-in
  101. Case Ignore String Syntax Plug-in
  102. Class of Service Plug-in
  103. Distinguished Name Syntax Plug-in
  104. Integer Syntax Plug-in
  105. ldbm database Plug-in
  106. Legacy Replication Plug-in
  107. Octet String Syntax Plug-in
  108. CRYPT Password Storage Plug-in
  109. SHA Password Storage Scheme Plug-in
  110. Postal Address String Syntax Plug-in
  111. PTA Plug-in
  112. Retro Changelog Plug-in
  113. Roles Plug-in
  114. Telephone Syntax Plug-in
  115. URI Plug-in
  116. List of Attributes Common to all Plug-ins
  117. nsslapd-pluginType
  118. nsslapd-pluginId
  119. nsslapd-pluginDescription
  120. nsslapd-plugin-depends-on-named
  121. Database Attributes Under cn=config,cn=ldbm database,cn=plugins,cn=config
  122. nsslapd-cache-autosize
  123. nsslapd-dbcachesize
  124. nsslapd-db-circular-logging
  125. nsslapd-db-durable-transactions
  126. nsslapd-db-idl-divisor
  127. nsslapd-db-logdirectory
  128. nsslapd-db-page-size
  129. nsslapd-db-transaction-logging
  130. nsslapd-dbncache
  131. nsslapd-mode
  132. dbcacheroevict
  133. nsslapd-cachememsize
  134. nsslapd-readonly
  135. Database Attributes Under cn=database,cn=monitor,cn=ldbm database, cn=plugins,cn=config
  136. nsslapd-db-commit-rate
  137. nsslapd-db-log-region-wait-rate
  138. cn=plugins,cn=config
  139. nsMatchingRule
  140. dbfilenamenumber
  141. dbfilepageout
  142. Database Link Plug-in Attributes (chaining attributes)
  143. Database Link Attributes Under cn=config,cn=chaining database, cn=plugins,cn=config
  144. nsMaxTestResponseDelay
  145. nsAbandonedSearchCheckInterval
  146. nsBindRetryLimit
  147. nsConcurrentBindLimit
  148. nsOperationConnectionsLimit
  149. nsReferralOnScopedSearch
  150. cn=chaining database, cn=plugins,cn=config
  151. nsMultiplexorCredentials
  152. cn=chaining database,cn=plugins,cn=config
  153. nsUnbindCount
  155. Overview of Directory Server Files
  156. configuration files
  157. Backup Files
  158. ldif Files
  159. Log Files
  160. Access Log Content
  161. Access Logging Levels
  162. Default Access Logging Content
  163. Connection Number
  164. Operation Number
  165. Number of Entries
  166. LDAP Response Type
  167. Change Sequence Number
  168. Abandon Message
  169. Access Log Content for Additional Access Logging Levels
  170. Connection Description
  171. LDAP Result Codes
  172. Migration from 4.x Directory Server to 6.x
  173. Server Attributes
  174. Database Attributes
  175. General Server Configuration Attributes
  177. Database Link Attributes
  178. SNMP Attributes
  179. Finding and Executing Command-Line Utilities
  180. Command-Line Utilities Quick Reference
  181. Using Special Characters
  182. ldapmodify
  183. ldapdelete
  184. ldif
  185. Finding and Executing Command-Line Scripts
  186. Command-Line Scripts Quick Reference
  187. Shell and Batch Scripts
  188. bak2db (Restore database from backup)
  189. db2dsml (Export database contents to DSML)
  190. dsml2db (Import DSML document contents into database)
  191. ldif2db (Import)
  192. ldif2ldap (Perform import operation over LDAP)
  193. monitor (Retrieve monitoring information)
  194. restoreconfig (Restore Administration Server Configuration)
  195. start-slapd (Start the Directory Server)
  196. suffix2instance (Map Suffix to Backend Name)
  197. vlvindex (Create virtual list view (VLV) indexes)
  198. Perl Scripts
  199. db2index.pl (Create and generate indexes)
  200. db2ldif.pl (Export database contents to LDIF)
  201. ldif2db.pl (Import)
  202. migrateInstance6 (Migrate to Directory Server 5.0 or 6.x)
  203. ns-accountstatus.pl (Establish account status)
  204. ns-activate.pl (Activate an entry or group of entries)
  205. Overview of ns-slapd and slapd.exe Commands
  206. ns-slapd (UNIX)
  207. ns-slapd and slapd.exe Command-Line Utilities for Exporting Databases
  208. ns-slapd and slapd.exe Command-Line Utilities for Restoring and Backing up Databases
  209. archive2db
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. Table Of Contents
  8. Table Of Contents
  9. Prerequisite Reading
  10. Related Information
  11. Chapter 1 About Schema
  12. Object Class Inheritance
  13. Attribute Syntax
  14. Single-Valued and Multi-Valued Attributes
  15. Object Identifiers (OIDs)
  16. Extending Server Schema
  17. Chapter 2 Object Class Reference
  18. account
  19. alias
  20. cosClassicDefinition
  21. cosDefinition
  22. cosIndirectDefinition
  23. cosPointerDefinition
  24. cosSuperDefinition
  25. cosTemplate
  26. country
  27. dcObject
  28. device
  29. document
  30. documentSeries
  31. domain
  32. domainRelatedObject
  33. extensibleObject
  34. friendlyCountry
  35. groupOfCertificates
  36. groupOfNames
  37. groupOfUniqueNames
  38. groupOfURLs
  39. inetOrgPerson
  40. labeledURIObject
  41. locality
  42. newPilotPerson
  43. nsComplexRoleDefinition
  44. nsFilteredRoleDefinition
  45. nsLicenseUser
  46. nsManagedRoleDefinition
  47. nsNestedRoleDefinition
  48. nsRoleDefinition
  49. nsSimpleRoleDefinition
  50. organization
  51. organizationalPerson
  52. organizationalRole
  53. organizationalUnit
  54. person
  55. pilotObject
  56. pilotOrganization
  57. residentialPerson
  58. RFC822LocalPart
  59. room
  60. strongAuthenticationUser
  61. simpleSecurityObject
  62. abstract
  63. associatedDomain
  64. audio
  65. authorSn
  66. businessCategory
  67. cACertificate
  68. certificateRevocationList
  69. co (friendlyCountryName)
  70. cosIndirectSpecifier
  71. cosTargetTree
  72. dc (domainComponent)
  73. departmentNumber
  74. destinationIndicator
  75. dITRedirect
  76. dNSRecord
  77. documentIdentifier
  78. documentPublisher
  79. documentVersion
  80. dSAQuality
  81. employeeType
  82. generationQualifier
  83. homePhone
  84. host
  85. info
  86. janetMailbox
  87. keyWords
  88. labeledURI
  89. lastModifiedTime
  90. mailPreferenceOption
  91. member
  92. memberURL
  93. name
  94. nsLicenseEndTime
  95. o (organizationName)
  96. obsoletesDocument
  97. otherMailbox
  98. pager
  99. personalTitle
  100. physicalDeliveryOfficeName
  101. postalCode
  102. preferredLanguage
  103. protocolInformation
  104. roleOccupant
  105. searchGuide
  106. serialNumber
  107. sn (surname)
  108. street
  109. subtreeMinimumQuality
  110. supportedApplicationContext
  111. telexNumber
  112. title
  113. uid (userID)
  114. uniqueMember
  115. userCertificate
  116. userPassword
  117. userSMIMECertificate
  118. Operational Attributes
  119. altServer
  120. copiedFrom
  121. dITContentRules
  122. ldapSyntaxes
  123. nameForms
  124. nsds5replconflict
  125. numSubordinates
  126. objectClasses
  127. passwordExpWarned
  128. retryCountResetTime
  129. supportedControl
  130. supportedSASLMechanisms
  131. changeLog
  132. changeType
  133. newSuperior
  134. Special Object Classes
  135. passwordObject
  136. subschema
  137. Index
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. Table Of Contents
  8. Table Of Contents
  9. Table Of Contents
  10. Table Of Contents
  11. Table Of Contents
  12. List of Figures
  13. List of Tables
  14. Introduction
  15. Prerequisite Reading
  16. Conventions Used in This Book
  17. Part 1 Administering Netscape Directory Server
  18. Overview of Directory Server Management
  19. Copying Entry DNs to the Clipboard
  20. Binding to the Directory From Netscape Console
  21. Starting and Stopping the Directory Server
  22. Configuring LDAP Parameters
  23. tracking modifications to directory entries
  24. Starting the Server with SSL Enabled
  25. Cloning a Directory Server
  26. Starting the Server in Referral Mode
  27. creating directory entries
  28. creating a root entry
  29. creating an entry using a predefined template
  30. modifying directory entries
  31. displaying the property editor
  32. adding an attribute to an entry
  33. removing an attribute value
  34. Managing Entries From the Command Line
  35. Providing Input From the Command Line
  36. creating a root entry from the command line
  37. Adding and Modifying Entries Using ldapmodify
  38. adding entries using ldapmodify
  39. modifying entries using ldapmodify
  40. deleting entries using ldapdelete
  41. using special characters
  42. LDIF Update Statements
  43. adding an entry using ldif
  44. renaming an entry using ldif
  45. A Note on Renaming Entries
  46. Adding Attributes to Existing Entries Using LDIF
  47. changing an attribute value using ldif
  48. deleting a specific attribute value using ldif
  49. Deleting an Entry Using LDIF
  50. Maintaining Referential Integrity
  51. Using Referential Integrity with Replication
  52. From the Directory Server Console
  55. creating and maintaining suffixes
  56. Creating Suffixes
  57. creating a new root suffix using the console
  58. creating a new sub suffix using the console
  59. Maintaining Suffixes
  60. enabling referrals only during update operations
  61. Creating and Maintaining Databases
  62. Creating Databases
  63. creating a new database for an existing suffix using the console
  64. adding multiple databases for a single suffix
  65. adding the custom distribution function to a suffix
  66. Maintaining Directory Databases
  67. Creating and Maintaining Database Links
  68. Configuring the Chaining Policy
  69. chaining ldap controls
  70. Creating a New Database Link
  71. creating a new database link using the console
  72. creating a database link from the command line
  73. Chaining Using SSL
  74. Maintaining Database Links
  75. Database Links and Access Control Evaluation
  76. Advanced Feature: Tuning Database Link Performance
  77. managing connections to the remote server
  78. Detecting Errors During Normal Processing
  79. Managing Threaded Operations
  80. Advanced Feature: Configuring Cascading Chaining
  81. configuring cascading chaining defaults using the console
  82. configuring cascading chaining using the console
  83. configuring cascading chaining from the command line
  84. Summary of Cascading Chaining Configuration Attributes
  85. configuring server one
  86. configuring server two
  87. configuring server three
  88. Using Referrals
  89. Creating Smart Referrals
  90. creating smart referrals using the directory server console
  91. creating smart referrals from the command line
  92. Creating Suffix Referrals
  93. importing data
  94. performing an import from the console
  95. initializing a database from the console
  96. Importing From the Command Line
  97. Exporting Data
  98. exporting directory data to ldif using the console
  99. exporting a single database to ldif using the console
  100. exporting to ldif from the command line
  101. Backing Up and Restoring Data
  102. backing up all databases from the server console
  103. backing up a single database
  104. Backing Up the dse.ldif Configuration File
  105. restoring your database from the command line
  106. Restoring Databases that Include Replicated Entries
  107. Restoring the dse.ldif Configuration File
  108. Using Groups
  109. Managing Static Groups
  110. Managing Dynamic Groups
  111. Using Roles
  112. Managing Roles Using the Console
  113. creating a managed role
  114. creating a filtered role
  115. modifying a role entry
  116. Managing Roles Using the Command Line
  117. Examples: Managed Role Definition
  118. Example: Filtered Role Definition
  119. Example: Nested Role Definition
  120. Assigning Class of Service
  121. About CoS
  122. About the CoS Template Entry
  123. How a Pointer CoS Works
  124. How a Classic CoS Works
  125. Managing CoS Using the Console
  126. editing an existing cos
  127. Managing CoS From the Command Line
  128. creating the cos template entry from the command line
  129. Example of a Pointer CoS
  130. Example of an Indirect CoS
  131. Example of a Classic CoS
  132. Creating Role-Based Attributes
  133. access control and cos
  134. Access Control Principles
  135. ACI Placement
  136. ACI Limitations
  137. Default ACIs
  138. Creating ACIs Manually
  139. Example ACI
  140. targeting a directory entry
  141. Targeting Attributes
  142. targeting both an entry and attributes
  143. targeting attribute values using ldap filters
  144. targeting a single directory entry
  145. defining permissions
  146. assigning rights
  147. Rights Required for LDAP Operations
  148. Permissions Syntax
  149. Bind Rule Syntax
  150. Anonymous Access (anyone Keyword)
  151. Self Access (self Keyword)
  152. Examples
  153. defining access based on value matching
  154. using the userattr keyword with inheritance
  155. granting add permission using the userattr keyword
  156. defining access from a specific ip address
  157. defining access from a specific domain
  159. defining access based on authentication method
  161. using boolean bind rules
  162. Creating ACIs From the Console
  163. displaying the access control editor
  164. viewing current acis
  165. editing an aci
  166. Access Control Usage Examples
  167. Granting Anonymous Access
  168. Granting Write Access to Personal Entries
  169. Restricting Access to Key Roles
  170. Granting a Group Full Access to a Suffix
  171. Granting Rights to Add and Delete Group Entries
  172. Granting Conditional Access to a Group or Role
  173. Denying Access
  174. Setting a Target Using Filtering
  175. Defining Permissions for DNs That Contain a Comma
  176. Proxied Authorization ACI Example
  177. Viewing the ACIs for an Entry
  178. Macro ACI Example
  179. Macro ACI Syntax
  180. Macro Matching for ($dn)
  181. Macro Matching for [$dn]
  182. Macro Matching for ($attr.attrName)
  183. Access Control and Replication
  184. Compatibility with Earlier Releases
  185. Managing the Password Policy
  186. Configuring the Password Policy
  187. Configuring the Password Policy Using the Command-Line
  188. Setting User Passwords
  189. Configuring the Account Lockout Policy
  190. Configuring the Account Lockout Policy Using the Command Line
  191. Managing the Password Policy in a Replicated Environment
  192. Inactivating Users and Roles
  193. Inactivating User and Roles Using the Console
  194. Activating User and Roles Using the Console
  195. Activating User and Roles Using the Command Line
  196. Setting Resource Limits Using the Console
  197. Replication Overview
  198. Change Log
  199. Replication Identity
  200. Replication Agreement
  201. Replication Scenarios
  202. Multi-Master Replication
  203. Cascading Replication
  204. Summary of Steps for Complex Replication Configurations
  205. Detailed Replication Tasks
  206. configuring supplier settings
  207. configuring a hub supplier
  208. creating a replication agreement
  209. Configuring Single-Master Replication
  210. Configuring Multi-Master Replication
  211. Configuring Cascading Replication
  212. initializing the replicas for cascading replication
  213. Deleting the Change Log
  214. Initializing Consumers
  215. online consumer initialization using the console
  216. manual consumer initialization using the command line
  217. Forcing Replication Updates
  218. forcing replication updates from the console
  219. Replication over SSL
  220. configuring replication over ssl using the replication wizard
  221. Replication with Earlier Releases
  222. Using the Retro Change Log Plug-In
  223. trimming the retro change log
  224. searching and modifying the retro change log
  225. monitoring replication status
  226. Solving Common Replication Conflicts
  227. solving orphan entry conflicts
  228. solving potential interoperability problems
  229. Overview of Extending Schema
  230. Managing Attributes
  231. creating attributes
  232. editing attributes
  233. Managing Object Classes
  234. viewing object classes
  235. creating object classes
  236. editing object classes
  237. deleting object classes
  238. About Indexes
  239. About Index Types
  240. About Default, System, and Standard Indexes
  241. Overview of System Indexes
  242. Overview of Standard Indexes
  243. Balancing the Benefits of Indexing
  244. Creating Indexes
  245. Creating Indexes From the Command Line
  246. Adding an Index Entry
  247. Running the db2index.pl Script
  248. Creating Browsing Indexes From the Server Console
  249. Creating Browsing Indexes from the Command Line
  250. Running the vlvindex Script
  251. Deleting Indexes
  252. Deleting Indexes From the Server Console
  253. Deleting Indexes From the Command Line
  255. Deleting Browsing Indexes From the Server Console
  256. Deleting Browsing Indexes From the Command Line
  258. Managing Indexes
  259. Drawbacks of the All IDs Mechanism
  260. When All IDs Threshold is Too High
  261. All IDs Threshold Tuning Advice for Service Providers and Extranets
  262. Default All IDs Threshold Value
  263. Changing the All IDs Threshold Value
  264. Attribute Name Quick Reference Table
  265. drink favoritedrink
  266. Chapter 11 Managing SSL
  267. Obtaining and Installing Server Certificates
  268. Activating SSL
  269. Setting Security Preferences
  270. Configuring LDAP Clients to Use SSL
  271. Viewing and Configuring Log Files
  272. defining a log file rotation policy
  273. Access Log
  274. Error Log
  275. viewing the error log
  276. Audit Log
  277. configuring the audit log
  278. Manual Log File Rotation
  279. Viewing the Server Performance Monitor
  280. Resource Summary
  281. Connection Status
  282. Global Database Cache Information
  283. monitoring your server from the command line
  284. Monitoring Database Activity
  285. General Information (Database)
  286. database cache information table
  287. Database File-Specific Table
  288. Monitoring Database Link Activity
  289. About SNMP
  290. NMS-Initiated Communication
  291. Overview of the Directory Server Management Information Base
  292. The Entries Table
  293. Setting Up SNMP
  294. Configuring the AIX SNMP Daemon
  295. Starting and Stopping the SNMP Subagent on UNIX
  296. Configuring SNMP for the Directory Server
  297. Tuning Server Performance
  298. Tuning Database Performance
  299. Optimizing Search Performance
  300. Tuning Transaction Logging
  301. Changing the Location of the Database Transaction Log
  302. Disabling Durable Transactions
  303. Specifying Transaction Batching
  304. Avoid Creating Entries Under the cn=config Entry in the dse.ldif File
  305. Part 2 Plug-Ins Reference
  306. Server Plug-in Functionality Reference
  307. ACL Plug-In
  308. ACL Preoperation Plug-In
  309. Boolean Syntax Plug-In
  310. Case Ignore String Syntax Plug-In
  311. Class of Service Plug-In
  312. Distinguished Name Syntax Plug-In
  313. Integer Syntax Plug-In
  314. ldbm Database Plug-In
  315. Legacy Replication Plug-In
  316. Octet String Syntax Plug-in
  317. CRYPT Password Storage Plug-In
  318. SHA Password Storage Plug-In
  319. Postal Address String Syntax Plug-In
  320. PTA Plug-In
  321. Retro Change Log Plug-In
  322. Telephone Syntax Plug-In
  323. URI Plug-in
  324. How Directory Server Uses PTA
  325. PTA Plug-In Syntax
  326. Configuring the PTA Plug-In
  327. configuring the servers to use a secure connection
  328. specifying the authenticating directory server
  329. configuring the optional parameters
  330. PTA Plug-In Syntax Examples
  331. Specifying One Authenticating Directory Server and Multiple Subtrees
  332. Overview of the Attribute Uniqueness Plug-In
  333. Overview of the UID Uniqueness Plug-in
  334. Creating an Instance of the Attribute Uniqueness Plug-In
  335. Configuring Attribute Uniqueness Plug-Ins
  336. specifying a suffix or subtree
  337. using the markerobjectclass and requiredobjectclass keywords
  338. Attribute Uniqueness Plug-In Syntax Examples
  339. specifying one attribute and multiple subtrees
  340. Simple Replication Scenario
  341. Overview of IM Presence Information
  342. Schema For the Presence Plug-In
  343. Performance-Related Information
  344. Setting Resource Limits Based on Bind DN
  345. Part 3 Appendixes
  346. LDIF File Format
  347. Continuing Lines in LDIF
  348. specifying directory entries using ldif
  349. specifying organizational unit entries
  350. specifying organizational person entries
  351. Defining Directories Using LDIF
  352. LDIF File Example
  353. Storing Information in Multiple Languages
  354. Finding Entries Using the Server Console
  355. Using ldapsearch
  356. ldapsearch Command-Line Format
  357. ldapsearch Examples
  358. Returning All Entries
  359. Using LDAP_BASEDN
  360. Specifying DNs that Contain Commas in Search Filters
  361. Search Filter Syntax
  362. Using Operators in Search Filters
  363. Using Compound Search Filters
  364. Search Filter Examples
  365. Searching an Internationalized Directory
  366. Matching Rule Filter Syntax
  367. Using Wildcards in Matching Rule Filters
  368. International Search Examples
  369. Less Than or Equal to Example
  370. Greater Than Example
  371. Components of an LDAP URL
  372. Escaping Unsafe Characters
  373. Examples of LDAP URLs
  374. About Locales
  375. identifying supported locales
  376. supported language subtypes
  377. Table Of Contents
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Server
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. Table Of Contents
  8. Preface
  9. Document Conventions
  10. Where to Find Directory Server Information
  11. Part 1 Introduction to Directory Server Plug-Ins
  12. What Are Directory Server Plug-Ins
  13. How Directory Server Plug-Ins Work
  14. Calling Directory Server Plug-In Functions
  15. Types of Directory Server Plug-Ins
  16. Including the API Header File
  17. Working with Parameter Blocks
  18. Setting Data in the Parameter Block
  19. Calling Front-End Functions
  20. Writing Plug-in Initialization Functions
  21. Specifying Directory Server Compatibility
  22. Registering Your Plug-In Functions
  23. Returning a Value to the Directory Server
  24. Compiling a Directory Server Plug-In
  25. Creating a Plug-In Configuration File
  26. Plug-In Dependencies
  27. Plug-In Type Dependencies
  28. Summary of Plug-In Directives
  29. Loading the Plug-In Configuration File
  30. Passing Extra Arguments to Plug-Ins
  31. Setting the Log Level of the Server
  32. Writing the Plug-In Example
  33. Compiling the Plug-In Example
  34. Registering the Plug-In Example
  35. Running the Plug-In Example
  36. Part 2 Basic Plug-In Programming Techniques
  37. Logging Messages
  38. Sending Data to the Client
  39. Working with Entries, Attributes, and Values
  40. Creating a New Entry
  41. Getting and Setting the DN of an Entry
  42. Getting the Attributes and Values of an Entry
  43. Working with DNs and RDNs
  44. Working with DN Suffixes
  45. Working with Search Filters
  46. Determining if an Entry Matches a Filter
  47. Getting the Search Criteria
  48. Converting a String to a Filter
  49. How Pre/Post-Operation Plug-Ins Work
  50. Types Pre-Operation and Post-Operation Functions
  51. Types of Post-Operation Functions
  52. Specifying Start and Close Functions
  53. Getting and Setting Parameters for the Bind Operation
  54. Processing an LDAP Search Operation
  55. Getting the List of Candidates
  56. Iterating Through Candidates
  57. Processing an LDAP Compare Operation
  58. Processing an LDAP Modify Operation
  59. Processing an LDAP Modify RDN Operation
  60. Processing an LDAP Delete Operation
  61. Understanding Authentication Methods
  62. How the Directory Server Identifies Clients
  63. Writing Your Own Authentication Plug-in
  64. Defining Your Authentication Function
  65. Getting the Entry and Checking the Credentials
  66. What to Do If Authentication Fails
  67. Registering the SASL Mechanism
  68. Example of a Pre-Operation Bind Plug-In
  69. Example of an Initialization Function
  70. Registering the Plug-In
  71. Using SASL with an LDAP Client
  72. Part 3 Advanced Programming Techniques
  73. How Entry Store/Fetch Plug-Ins Work
  74. Writing Entry Store/Fetch Functions
  75. How Extended Operation Plug-Ins Work
  76. Writing Extended Operation Functions
  77. Registering Extended Operation Functions
  79. Understanding Matching Rules
  80. Extensible Match Filters
  81. Extensible Match Filters in the Directory Server
  82. How Matching Rules Are Identified
  83. How the Server Associates Plug-Ins with OIDs
  84. Finding a Plug-In for Searching
  85. How the Server Uses Parameter Blocks
  86. How the Server Updates the Index
  87. Writing the Indexer Factory Function
  88. Getting and Setting Parameters in Indexer Factory Functions
  89. Writing the Indexer Function
  90. Getting and Setting Parameters in Indexer Functions
  91. How the Server Handles the Filter
  92. Query Operators in Matching Rules
  93. Writing a Filter Factory Function
  94. Getting and Setting Parameters in Filter Factory Functions
  95. Writing a Filter Index Function
  96. Getting and Setting Parameters in Filter Index Functions
  97. Writing a Filter Matching Function
  98. Handling Sorting by Matching Rules
  99. Writing a Destructor Function
  101. About Distributing Flat Namespaces
  102. Creating a Distribution Function
  103. Adding the Distribution Function to Your Directory
  104. Using the Console
  105. Adding Distribution Logic to a Suffix
  106. Custom Distribution Checklist
  107. Part 4 Reference
  108. Summary of Data Types and Structures
  109. Distribution Routines
  110. Functions for Access Control
  111. Functions for Internal Operations and Plug-In Callback
  112. Functions for Setting Internal Operation Flags
  113. Functions for Handling Attributes
  114. Functions for Managing Backend Operations
  115. Functions for Dealing with Controls
  116. Functions for Syntax Plug-In
  117. Functions for Managing Memory
  118. Functions for Managing DNs
  119. Functions for Managing Entries
  120. Functions Related to Entry Flags
  121. Functions for Dealing with Filters
  122. Functions Specific to Extended Operation
  123. Functions Specific to Bind Methods
  124. Functions for Thread-Safe LDAP Connections
  125. Functions for Logging
  126. Functions for Handling Matching Rules
  127. Functions for LDAPMod Manipulation
  128. Functions for Monitoring Operations
  129. Functions for Managing Parameter Block
  130. Functions for Handling Passwords
  131. Functions for Managing RDN
  132. Functions for Managing Roles
  134. Functions for Sending Entries and Results to the Client
  135. Functions Related to UTF-8
  136. Functions for Handling Values
  137. Functions for Handling Valueset
  138. Functions Specific to Virtual Attribute Service
  139. Functions for Managing Locks and Synchronization
  140. functions for manipulating bits
  141. Functions for Registering Object Extensions
  142. Parameters for Registering Plug-In Functions
  143. Post-Operation/Data Notification Plug-Ins
  144. Extended Operation Plug-Ins
  145. Matching Rule Plug-Ins
  146. Information About the Database
  147. Information About the Connection
  148. Information About the Operation
  149. Notes in the Access Log
  150. Information About the Plug-In
  151. Types of Plug-Ins
  152. Parameters for the Configuration Function
  153. Parameters for the Search Function
  154. Parameters for the Add Function
  155. Parameters for the Compare Function
  156. Parameters for the Modify Function
  157. Parameters for the Modify RDN Function
  158. Parameters for the Abandon Function
NETSCAPE DIRECTORY SERVER 6.01 first page preview

NETSCAPE DIRECTORY SERVER 6.01

Brand: Netscape | Category: Software
Table of contents
  1. Table Of Contents
  2. Table Of Contents
  3. Table Of Contents
  4. Table Of Contents
  5. Table Of Contents
  6. Table Of Contents
  7. Table Of Contents
  8. Table Of Contents
  9. Table Of Contents
  10. Table Of Contents
  11. Table Of Contents
  12. Table Of Contents
  13. Table Of Contents
  14. Table Of Contents
  15. Table Of Contents
  16. Table Of Contents
  17. Table Of Contents
  18. Table Of Contents
  19. Table Of Contents
  20. About This Guide
  21. What You Should Already Know
  22. Conventions Used in This Guide
  23. Where to Go for Related Information
  24. Part 1 Overview and Demo Installation
  25. Overview of Key Features
  26. Flexible end-entity registration services framework
  27. System Overview
  28. Public-Key Infrastructure
  29. CMS Subsystems or Managers
  30. Certificate Manager
  31. Registration Manager
  32. Data Recovery Manager
  33. Online Certificate Status Manager
  34. Basic System Configuration
  35. Plug-in Modules
  36. Policy Plug-in Modules
  37. Job Plug-In Modules
  38. Mapper and Publisher Plug-in Modules
  39. Event-Driven Notifications
  40. Command-Line Utilities
  41. Entry Points for Various Types of Users
  42. Agent Services Interface
  43. Registration Manager Agent Services
  44. Data Recovery Manager Agent Services
  45. Online Certificate Status Manager Agent Services Interface
  46. End-Entity Services Interface
  47. System Architecture
  48. JSS and the Java/JNI Layer
  49. Middleware/Java 2 Layers
  50. Security and Directory Protocols
  51. Steps in End-Entity Enrollment
  52. Some Enrollment Scenarios
  53. Extranet/E-Commerce: ExampleCorp
  54. Enrolling Existing Customers
  55. Enrolling New Customers
  56. Enrolling Extranet Users
  57. PIN Registration: Atlas Manufacturing
  58. VPN Client Enrollment and Revocation
  59. Router Enrollment and Revocation
  60. End Entities and Life-Cycle Management
  61. Access to Subsystems
  62. HTML Forms for End Users
  63. Netscape Personal Security Manager
  64. System Requirements
  65. Overview of the Default Demo
  66. Demo Passwords
  67. Installing the Default Demo
  68. Step 2. Run the Installation Wizard
  69. Step 3. Get the First User Certificate
  70. If You Need the First Agent Form Again
  71. Using the Default Demo
  72. Viewing Issued Certificates From the Agent Gateway
  73. Enrolling for a Certificate From the End-Entity Gateway
  74. Finding and Approving a Certificate Request
  75. Setting Your Browser to Use the Agent Certificate
  76. Create a Policy
  77. Use an LDAP Directory
  78. Step 1. Enable Directory-Based Authentication
  79. Step 2. Add a User to the Directory
  80. Step 3. Enroll with Directory-Based Authentication
  81. Publish Certificates to an LDAP Directory
  82. Configure the Publishing Destination
  83. Set Rules for Publishing Certificates
  84. Update the Publishing Directory
  85. Send Renewal Reminders
  86. Configuring a Mail Server for Certificate Management System
  87. Configuring Certificate Management System to Send Renewal Reminders
  88. Part 2 Planning and Installation
  89. Topology Decisions
  90. Certificate Manager and Registration Manager
  91. Certificate Manager and Data Recovery Manager
  92. Certificate Manager, Data Recovery Manager, and Registration Manager
  93. Cloned Certificate Manager
  94. CA's Distinguished Name
  95. CA Signing Certificate's Validity Period
  96. CAs and Certificate Extensions
  97. Cryptographic Token Decisions
  98. Publishing Decisions
  99. Publishing CRLs to the Online Certificate Status Manager
  100. Subsystem Certificate Decisions
  101. Certificate Manager Certificates
  102. Data Recovery Manager Certificate and Storage Key
  103. Authentication Decisions
  104. Information for UNIX Installation Script
  105. User/Group Directory Server
  106. Administration Server Information
  107. Certificate Management System Identifier
  109. Configuration Directory Settings
  110. Administration Server Port
  111. Token Logon or Single Sign-On Password
  112. Subsystems
  113. Network Configuration
  114. Key-Pair Information for CA Signing Certificate
  115. Validity Period for CA Signing Certificate
  116. CA Signing Certificate Request
  117. Subject Name for Registration Manager Signing Certificate
  118. Registration Manager Signing Certificate Issuer
  119. Subject Name for Transport Certificate
  120. Validity Period for Transport Certificate
  121. Transport Certificate Request
  122. Online Certificate Status Manager Configuration
  123. Online Certificate Status Manager Signing Certificate Request
  124. Online Certificate Status Manager Signing Certificate Issuer
  125. CA Signing Certificate
  126. SSL Server Key and Certificate
  127. Subject Name for SSL Server Certificate
  128. Extensions for SSL Server Certificate
  129. SSL Certificate Request
  130. Installation Overview
  131. Installation Stages
  132. Before You Begin the Installation
  133. Stage 1. Running the Installation Script
  134. Running the Installation Script on Windows NT
  135. Stage 2. Running the Installation Wizard
  136. Installing the Certificate Manager as a Root CA
  137. Installing the Certificate Manager as a Subordinate CA
  138. Installing a Standalone Registration Manager
  139. Installing a Standalone Data Recovery Manager
  140. Installing a Online Certificate Status Manager
  141. Stage 3. Enrolling for Administrator/Agent Certificate
  142. Agent Certificate for Other CMS Managers
  143. Stage 5. Creating Additional Instances or CA Clones
  144. Installing Multiple CMS Instances
  145. Cloning a Certificate Manager
  146. Step 1. Before You Begin
  147. Step 2. Create Instances for Clone CAs
  148. Installing Clone CA in a Different Server Group
  149. Installing Clone CA on a Separate Host
  150. Step 4. Copy Master CA's Certificate and Key Database
  151. Step 6. Configure the Clone CA
  152. Step 8. Establish Trust Between Master CA and Clone CAs
  153. Step B. Create a Privileged-User Entry for Clone CAs
  154. Step 9. Test Clone-Master Connection
  155. Step B. Approve the Request
  156. Step D. Revoke the Certificate
  157. Step 10. Use Master CA's Agent Certificate in Clone CAs
  158. Viewing Instance Information
  159. Changing the Name of an Instance
  160. Removing an Instance From a System
  161. Uninstalling From the Command Line
  162. Uninstalling by Using the Windows NT Add/Remove Programs Utility
  163. Significance of password.conf File
  164. Required Start-up Information
  165. Starting From Netscape Console
  166. Starting From the Command Line
  167. Starting From the Windows NT Services Panel
  168. Stopping From Netscape Console
  169. Stopping From the Command Line
  170. Restarting From the CMS Window
  171. Restarting From the Command Line
  172. Attending to an Unresponsive Server
  173. Password-Quality Checker
  174. Part 3 Configuration
  175. Netscape Console
  176. Users and Groups Tab
  177. Netscape Administration Server
  178. Starting Administration Server
  179. Shutting Down Administration Server
  180. The CMS Window
  181. Tasks Tab
  182. Logging In to the CMS Window
  183. Effects of Installation Type on Configuration
  184. Duplicating Configuration From One Instance to Another
  185. Modifying the Configuration
  186. Guidelines for Editing the Configuration File
  187. Sample Configuration File
  188. Road Map to Configuring Subsystems
  189. Step 1. Check Which Subsystem is Installed in the Instance
  190. Step 5. Customize End-Entity and Agent Forms
  191. Step 8. Schedule Jobs
  192. Step 11. Set up Key Archival and Recovery
  193. Chapter 11 Setting Up Ports
  194. Remote Administration Port
  195. Agent Port
  196. Step 1. Specify the Port Number
  197. Step 2: Specify IP Addresses
  198. Internal Database
  199. Step 1. Identify the Directory Server Instance
  200. Step 2. Restrict Access to the Internal Database
  201. Privileged-User Types and Responsibilities
  202. Agents
  203. Agent's Certificate for SSL Client Authentication
  204. Revocation Status Checking of Agent Certificates
  205. Trusted Managers
  206. Subsystems That Can Function as Trusted Managers
  207. Connectors for Linking Trusted Managers
  208. Trusted Manager's Certificate for SSL Client Authentication
  209. Groups and Their Privileges
  210. Groups for Agents
  211. Group for Registration Manager Agents
  212. Group for Online Certificate Status Manager Agents
  213. Setting Up Privileged Users
  214. Setting Up Agents
  215. Setting up Agents Using the Manual Process
  216. Setting Up Trusted Managers
  217. Setting Up a Registration Manager as a Trusted Manager
  218. Setting Up a Certificate Manager as a Trusted Manager
  219. Changing Privileged-User Information
  220. Changing a Privileged User's Certificate
  221. Changing Members in a Group
  222. Deleting a Privileged User
  223. Keys and Certificates for the Main Subsystems
  224. Certificate Manager's Key Pairs and Certificates
  225. OCSP Signing Key Pair and Certificate
  226. CRL Signing Key Pair and Certificate
  227. SSL Server Key Pair and Certificate
  228. Registration Manager's Key Pairs and Certificates
  229. Data Recovery Manager's Key Pairs and Certificates
  230. Transport Key Pair and Certificate
  231. Online Certificate Status Manager's Key Pairs and Certificates
  233. Tokens for Storing CMS Keys and Certificates
  234. Installing External Tokens
  235. Managing Tokens Used by the Subsystems
  236. Changing a Token's Password
  237. Hardware Cryptographic Accelerators
  238. Using the Wizard to Request a Certificate
  239. Step 1. Select the Operation
  240. Step 2. Choose the Certificate
  241. Step 3. Specify the Key-Pair Information
  242. Step 4. Specify the Subject Name for the Certificate
  243. Step 5. Specify the Validity Period
  244. Step 6. Specify Extensions
  245. Step 7. Copy the Certificate Signing Request
  246. Step 8. Check the Certificate Request Status
  247. Using the Wizard to Install a Certificate or Certificate Chain
  248. Data Formats for Installing Certificates and Certificate Chains
  250. Step 2. Select the Certificate or Certificate Chain
  251. Step 3. Specify the Location of the Certificate
  252. Step 4. View the Certificate or Certificate Chain
  253. Step 6. Verify the Certificate Status
  254. Step 1. Get the Required SSL Server Certificates
  255. Getting an SSL Client Certificate for a Subsystem
  256. Setting Up Cipher Preferences for SSL Communications
  257. SSL Ciphers Supported in Certificate Management System
  258. Configuring the Server to Use Specific Ciphers
  259. Getting New Certificates for the Subsystems
  260. Step 1. Plan for the New Certificate
  261. Step 2. Request the New Certificate
  262. Step 4. Deploy the New Certificate
  263. Deploying Registration Manager's Signing Certificate
  264. Deploying Data Recovery Manager's Transport Certificate
  265. Deploying a Subsystem's SSL Server Certificate
  266. Renewing Certificates for the Subsystems
  267. Step 1. Plan for Certificate Renewal
  268. Step 2. Renew the Existing Certificate
  269. Step 3. Install the Renewed Certificate
  270. Deploying Certificate Manager's Renewed CA Signing Certificate
  271. Deploying Data Recovery Manager's Renewed Transport Certificate
  272. Deploying a Subsystem's Renewed SSL Server Certificate
  273. Step 5. Restart the Server
  274. Viewing the Certificate Database Content
  275. Changing the Trust Settings of a CA Certificate
  276. Installing a New CA Certificate in the Certificate Database
  277. Introduction to Authentication
  278. Privileged-User Authentication
  279. Authentication of Agents
  280. End-Entity Authentication
  281. Authentication of End Users During Certificate Revocation
  282. Configuring Authentication for End-User Enrollment
  284. Step 2. Set Up the Directory for PIN-Based Enrollment
  285. Step B. Update the Directory
  286. Step C. Prepare the Input File
  287. Step E. Check the Output File
  288. Step 4: Add an Authentication Instance
  289. Step 5. Set Up the Enrollment Interface
  290. Step B. Customize the Form
  291. Step D. Remove Unwanted Enrollment Options
  292. Step 6. Enable End-Entity Interaction
  293. Enabling End-Entity Interaction with a Registration Manager
  294. Step 7. Turn on Automated Notification
  295. Step 9. Deliver PINs to End Users
  296. Setting Up Agent Initiated End User Enrollment
  297. Modifying an Authentication Instance
  298. Managing Authentication Plug-in Modules
  299. Registering an Authentication Module
  300. Deleting an Authentication Module
  301. Automated Notifications
  302. Notifications of Certificate Issuance to End Entities
  303. Notification of New Request in Queue
  304. Customizing Notification Messages
  305. Customizing Message Templates
  306. Tokens Available in Message Templates
  307. Tokens for Rejection Notifications to End Entities
  308. Tokens for Request In Queue Notification Messages
  309. Step 2. Turn On Certificate-Issuance Notification
  310. Step 3. Turn on Request in Queue Notification
  311. Step 4. Verify Mail Server Settings
  312. Step 5. Test Your Configuration
  313. Configuring a Subsystem to Run Automated Jobs
  314. Step 2. Modify Existing Jobs
  315. Step 3. Delete Unwanted Jobs
  316. Step 6. Verify Mail Server Settings
  317. Step 7. Test Your Configuration
  318. Registering a Job Module
  319. Deleting a Job Module
  320. Introduction to Policy
  321. What Is Policy
  322. Policy Rules
  323. Using Predicates in Policy Rules
  324. Attributes for Predicates
  325. Policy Processor
  326. Configuring Policy Rules for a Subsystem
  327. Step 2. Modify Existing Policy Rules
  328. Step 3. Delete Unwanted Policy Rules
  329. Step 5. Reorder Policy Rules
  330. Step 6. Restart the Server
  332. Using JavaScript for Policies
  333. Deleting a Policy Module
  334. Publishing of Certificates to a Directory
  335. Timing of Directory Updates
  336. Directory Update Process
  337. Directory Synchronization
  338. What's a CRL
  339. Reasons for Revoking a Certificate
  340. Revocation Checking by Netscape Clients
  341. Publishing of CRLs to an LDAP Directory
  342. CRL Issuing Points
  344. Step 2. Set Up the Directory for Publishing
  345. Step C. Identify an Entry That Has Write Access
  346. Step E. Specify the Directory Authentication Method
  347. Step F. Modify the Certificate Mapping File
  348. Step G. Restart Directory Server
  349. Step B. Add Mappers, Publishers, and Publishing Rules
  350. Step 4. Configure the Certificate Manager to Publish CRLs
  351. Step A. Specify CRL Details
  352. Step B. Set the CRL Extensions
  353. Step C. Create a Mapper for the CRL
  354. Step D. Create a Publisher for the CRL
  355. Step E. Create a Publishing Rule for the CRL
  356. Step 5. Identify the Publishing Directory
  357. Step 6. Test Certificate and CRL Publishing
  358. Step A. Decide a Directory Entry for Requesting a Certificate
  359. Step D. Download the Certificate to the Browser
  360. Step F. Revoke the Certificate
  361. Step G. Check the Directory for the CRL
  362. Manually Updating Certificates in the Directory
  363. Manually Updating the CRL in the Directory
  364. Configuring Certificate Manager to Publish to Files
  366. Step 2. Configure the Certificate Manager
  367. Step B. Create Publishing Rules for Certificates
  368. Step C. Create a Publishing Rule for CRLs
  369. Step D. Specify CRL Details
  370. Step E. Set the CRL Extensions
  371. Step F. Make Sure Publishing is Enabled
  373. Step D. Check the File for the Certificate
  374. Step E. Revoke the Certificate
  375. Step F. Check the File for the CRL
  376. Managing Mapper and Publisher Plug-in Modules
  377. Deleting a Mapper or Publisher Module
  378. What's an OCSP-Compliant PKI Setup
  379. How to Get an OCSP Responder
  380. How Online Certificate Status Manager Works
  381. How to Get OCSP-Compliant Clients
  382. Setting Up a Certificate Manager with OCSP Service
  383. Step 2. Install OCSP-Compliant Client
  384. Setting Up Personal Security Manager for OCSP-Based Certificate Validation
  385. Step 3. Enable Certificate Manager's HTTP Port
  386. Step 5. Restart the Certificate Manager
  387. Step A. Turn On Revocation Checking in the Browser
  388. Step C. Approve the Request
  389. Step E. Make Sure the CA is Trusted by the Browser
  390. Step H. Revoke the Certificate
  391. Step J. Check the Certificate Manager's OCSP Service Status Again
  393. Step 2. Install an OCSP-Compliant Client
  395. Step A. Specify CRL Format and Publishing Interval
  397. Step C. Create a Publisher for the CRL
  398. Step D. Create a Publishing Rule for the CRL
  399. Step E. Make Sure Publishing is Enabled
  400. Step 5. Configure Certificate Manager for Required Extension Policies
  401. Step 6. Configure the Online Certificate Status Manager
  402. Step 7. Restart the Certificate Manager
  403. Step 8. Restart the Online Certificate Status Manager
  404. Step 10. Test Your OCSP Responder Setup
  405. Step B. Request a Certificate
  407. Step F. Verify the Certificate in the Browser
  408. Step I. Verify the Certificate in the Browser
  409. PKI Setup for Key Archival and Recovery
  410. Clients That Can Generate Dual Key Pairs
  411. Forms for Users and Key Recovery Agents
  412. Where the Keys are Stored
  413. How Key Archival Works
  414. Key Recovery Process
  415. Interface for the Key Recovery Process
  416. Local Versus Remote Key Recovery Authorization
  417. How Agent-Initiated Key Recovery Works
  418. Key Recovery Agent Scheme
  419. Changing Key Recovery Agents' Passwords
  420. Configuring Key Archival and Recovery Process
  421. Step A. Deploy Clients That Can Generate Dual Key Pairs
  422. Step C. Customize the Certificate Enrollment Form
  423. Step D. Configure Key Archival Policies
  424. Step 2. Set Up the Key Recovery Process
  425. Step B. Facilitate the Key Recovery Agents to Change the Passwords
  426. Step 3. Test Your Key Archival and Recovery Setup
  427. Step B. Verify the Key
  428. Step D. Restore the Key in the Browser's Database
  429. Introduction to Logs
  430. Logs Maintained by the Server
  431. Services That Are Logged
  432. Log Levels (Message Categories)
  433. Log File Locations
  434. Log File Naming Conventions
  435. Rotation of Log Files
  436. Location of Rotated Log Files
  437. Configuring CMS Logs
  438. Step 3. Delete Unwanted Listeners
  439. Step 4. Create New Listeners
  440. Monitoring CMS Logs
  441. Monitoring System Logs
  442. Monitoring Error Logs
  443. Monitoring Audit Logs
  444. Using System Tools for Monitoring the Server (Windows NT Only)
  445. Logging to Windows NT Event Log
  446. Avoiding Event Log From Getting Filled
  447. Archiving of Rotated Log Files
  448. Signing Log Files
  449. Managing Log Modules
  450. Deleting a Log Module
  451. Part 4 Issuing and Managing Certificates
  452. Certificate Issuance to Servers
  453. How the Manual Server Enrollment Process Works
  454. Getting Server SSL Certificates for Netscape Servers
  455. Step 1. Generate the Server Certificate Request
  456. Step 3. Install Your Server's SSL Certificate
  457. Step 5. Verify Your Server's SSL and CA Certificates
  458. Renewal of Server Certificates
  459. CEP Enrollment
  460. Setting up CEP Enrollment Manually
  461. Step 1. Set up the Directory for Publishing Certificates and CRLs
  462. Step 2. Configure the Certificate Manager for Publishing Certificates and CRLs
  463. Step 3. Set Up Automated Enrollment
  464. Step 4. Set Up Multiple CEP Services
  465. Certificate Issuance to Routers or VPN Clients
  467. Step 2. Generate the Key Pair for the Router
  468. Step 3. Request the CA's Certificate
  469. Example
  470. Part 5 Appendix
  471. Certificate Download Specification
Related products
NETSCAPE DIRECTORY SERVER 6.0NETSCAPE DIRECTORY SERVER 6.02NETSCAPE DIRECTORY SERVER 6.01 - PLUG-INNETSCAPE DIRECTORY SERVER 7.0NETSCAPE DIRECTORY SERVER 6.01 - DEPLOYMENTNETSCAPE DIRECTORY SERVER 6.02 - PLUG-INNETSCAPE DIRECTORY SERVER 6.01 - ADMINISTRATORNETSCAPE DIRECTORY SERVER 6.0 - DEPLOYMENTNETSCAPE DIRECTORY SERVER 6.1 - PLUG-INNETSCAPE DIRECTORY SERVER 6.2 - PLUG-IN
Netscape categories
Server
Software
Gateway
More Netscape categories
Manuals database logo
manualsdatabase
Your AI-powered manual search engine