Netscape NETSCAPE DIRECTORY SERVER 6.02 manuals
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- About This Reference Guide
- Prerequisite Reading
- Conventions Used In This Reference Guide
- Chapter 1 Introduction
- Directory Server Configuration
- Using Directory Server Command-Line Scripts
- LDIF Configuration Files - Location
- Configuration of Plug-in Functionality
- Configuration of Databases
- Migration of Pre-Directory Server 6.x Configuration Files to LDIF Format
- Changing Configuration Attributes
- Modifying Configuration Entries Using LDAP
- Restrictions to Modifying Configuration Entries and Attributes
- cn=config
- nsslapd-accesslog (Access Log)
- nsslapd-accesslog-level
- nsslapd-accesslog-logexpirationtime (Access Log Expiration Time)
- nsslapd-accesslog-logging-enabled (Access Log Enable Logging)
- nsslapd-accesslog-logminfreediskspace (Access Log Minimum Free Disk Space)
- nsslapd-accesslog-logrotationtimeunit (Access Log Rotation Time Unit)
- nsslapd-accesslog-maxlogsperdir (Access Log Maximum Number of Log Files)
- nsslapd-auditlog (Audit Log)
- nsslapd-auditlog-list
- nsslapd-auditlog-logging-enabled (Audit Log Enable Logging)
- nsslapd-auditlog-logminfreediskspace (Audit Log Minimum Free Disk Space)
- nsslapd-auditlog-logrotationtimeunit (Audit Log Rotation Time Unit)
- nsslapd-auditlog-maxlogsperdir (Audit Log Maximum Number of Log Files)
- nsslapd-certmap-basedn (Certificate Map Search Base)
- nsslapd-enquote-sup-oc (Enable Superior Object Class Enquoting)
- nsslapd-errorlog (Error Log)
- nsslapd-errorlog-level (Error Log Level)
- nsslapd-errorlog-list
- nsslapd-errorlog-logging-enabled (Enable Error Logging)
- nsslapd-errorlog-logrotationtime (Error Log Rotation Time)
- nsslapd-errorlog-maxlogsize (Maximum Error Log Size)
- nsslapd-groupevalnestlevel
- nsslapd-ioblocktimeout (IO Block Time Out)
- nsslapd-listenhost (Listen to IP Address)
- nsslapd-maxbersize (Maximum Message Size)
- nsslapd-maxthreadsperconn (Maximum Threads Per Connection)
- nsslapd-nagle
- nsslapd-port (Port Number)
- nsslapd-referral (Referral)
- nsslapd-referralmode (Referral Mode)
- nsslapd-return-exact-case (Return Exact Case)
- nsslapd-rootpw (Root Password)
- nsslapd-schemacheck (Schema Checking)
- nsslapd-securelistenhost
- nsslapd-security (Security)
- nsslapd-threadnumber (Thread Number)
- nsslapd-versionstring
- passwordExp (Password Expiration)
- passwordInHistory (Number of Passwords to Remember)
- passwordLockoutDuration (Lockout Duration)
- passwordMaxFailure (Maximum Password Failures)
- passwordMustChange (Password Must Change)
- passwordStorageScheme (Password Storage Scheme)
- passwordWarning (Send Warning)
- nsslapd-changelogdir
- nsslapd-changelogmaxage (Max Changelog Age)
- cn=encryption
- nsssl2
- cn=features
- nsslapd-state
- cn=mapping tree,cn=config
- nsDS5Flags
- nsDS5ReplicaChangeCount
- nsDS5ReplicaName
- nsDS5ReplicaReferral
- nsDS5ReplicaType
- description
- nsDS5ReplicaBindMethod
- nsDS5ReplicaHost
- nsDS5ReplicaLastInitStatus
- nsDS5ReplicaLastUpdateStart
- nsDS5ReplicaRefresh
- nsDS5ReplicaTransportInfo
- nsDS5ReplicaUpdateSchedule
- currentConnections
- backendMonitorDN
- nssnmporganization
- nssnmpdescription
- cn=tasks
- Overview
- Object Classes for Plug-In Configuration
- bit check Plug-in
- ACL preoperation Plug-in
- Boolean Syntax Plug-in
- Case Ignore String Syntax Plug-in
- Class of Service Plug-in
- Distinguished Name Syntax Plug-in
- Integer Syntax Plug-in
- ldbm database Plug-in
- Legacy Replication Plug-in
- Octet String Syntax Plug-in
- CRYPT Password Storage Plug-in
- SHA Password Storage Scheme Plug-in
- Postal Address String Syntax Plug-in
- Presence Plug-in
- Referential Integrity Postoperation Plug-in
- Retro Changelog Plug-in
- State Change Plug-in
- UID Uniqueness Plug-in
- URI Syntax Plug-in
- List of Attributes Common to All Plug-ins
- nsslapd-pluginEnabled
- nsslapd-pluginVendor
- Attributes Allowed by Certain Plug-ins
- Database Plug-in Attributes
- nsLookthroughLimit
- nsslapd-cache-autosize
- nsslapd-db-checkpoint-interval
- nsslapd-db-circular-logging
- nsslapd-db-durable-transactions
- nsslapd-db-idl-divisor
- nsslapd-db-logdirectory
- nsslapd-db-page-size
- nsslapd-db-transaction-logging
- nsslapd-db-trickle-percentage
- nsslapd-import-cachesize
- Database Attributes Under cn=monitor,cn=ldbm database, cn=plugins,cn=config
- cn=UserRoot,cn=ldbm database, cn=plugins,cn=config
- nsslapd-cachememsize
- nsslapd-require-index
- Database Attributes Under cn=database,cn=monitor,cn=ldbm database, cn=plugins,cn=config
- nsslapd-db-deadlock-rate
- nsslapd-db-log-write-rate
- cn=plugins,cn=config
- nsMatchingRule
- dbfilenamenumber
- dbfilepageout
- Database Link Plug-in Attributes (chaining attributes)
- Database Link Attributes Under cn=config,cn=chaining database, cn=plugins,cn=config
- nsMaxTestResponseDelay
- nsAbandonedSearchCheckInterval
- nsBindRetryLimit
- nsConcurrentBindLimit
- nsOperationConnectionsLimit
- nsReferralOnScopedSearch
- nsFarmServerURL
- nsMultiplexorCredentials
- cn=chaining database, cn=plugins,cn=config
- nsUnbindCount
- Overview of Directory Server Files
- configuration files
- Backup Files
- ldif Files
- Lock Files
- Access Log Content
- Access Logging Levels
- Default Access Logging Content
- Connection Number
- Operation Number
- Number of Entries
- LDAP Response Type
- Change Sequence Number
- Abandon Message
- Access Log Content for Additional Access Logging Levels
- Connection Description
- Common Connection Codes
- LDAP Result Codes
- Migration from 4.x Directory Server to 6.x
- Server Attributes
- Database Attributes
- General Server Configuration Attributes
- Database Link Attributes
- SNMP Attributes
- Finding and Executing Command-Line Utilities
- Command-Line Utilities Quick Reference
- Using Special Characters
- ldapsearch
- SSL Options
- Additional ldapsearch Options
- ldapmodify
- ldapmodify Options
- Additional ldapmodify Options
- ldapdelete
- Additional ldapdelete Options
- ldif
- Options
- Finding and Executing Command-Line Scripts
- Command-Line Scripts Quick Reference
- Shell and Batch Scripts
- bak2db (Restore database from backup)
- db2bak (Create backup of database)
- db2dsml (Export database contents to DSML)
- Syntax
- getpwenc (Print encrypted password)
- ldif2ldap (Perform import operation over LDAP)
- monitor (Retrieve monitoring information)
- restoreconfig (Restore Administration Server Configuration)
- start-slapd (Start the Directory Server)
- stop-slapd (Stop the Directory Server)
- vlvindex (Create virtual list view (VLV) indexes)
- Perl Scripts
- db2bak.pl (Create backup of database)
- db2ldif.pl (Export database contents to LDIF)
- ldif2db.pl (Import)
- migrateInstance6 (Migrate to Directory Server 6.x)
- ns-accountstatus.pl (Establish account status)
- ns-inactivate.pl (Inactivate an entry or group of entries)
- Overview of ns-slapd and slapd.exe Commands
- ns-slapd (UNIX)
- ns-slapd and slapd.exe Command-Line Utilities for Exporting Databases
- ns-slapd and slapd.exe Command-Line Utilities for Restoring and Backing up Databases
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- About This Guide
- Directory Server Overview
- Conventions Used in This Guide
- introduction to directory server
- About Global Directory Services
- About LDAP
- Overview of Directory Server Architecture
- Overview of the Basic Directory Tree
- Directory Server Data Storage
- About Directory Entries
- Distributing Directory Data
- Design Process Outline
- Deploying Your Directory
- Other General Directory Resources
- introduction to directory data
- What Your Directory Might Include
- What Your Directory Should Not Include
- Performing a Site Survey
- Identifying the Applications that Use Your Directory
- Identifying Data Sources
- Characterizing Your Directory Data
- Determining Level of Service
- Data Mastering for Replication
- Determining Data Ownership
- Determining Data Access
- Documenting Your Site Survey
- Repeating the Site Survey
- Schema Design Process Overview
- Netscape Standard Schema
- Standard Attributes
- Standard Object Classes
- Mapping Your Data to the Default Schema
- Matching Data to Schema Elements
- Customizing the Schema
- When to Extend Your Schema
- Naming Attribute and Object Classes
- Strategies for Defining New Attributes
- Creating Custom Schema Files
- Custom Schema Best Practices
- Maintaining Consistent Schema
- Schema Checking
- Maintaining Consistency in Replicated Schema
- Other Schema Resources
- Introduction to the Directory Tree
- Designing Your Directory Tree
- Suffix Naming Conventions
- Naming Multiple Suffixes
- Identifying Branch Points
- Replication Considerations
- Access Control Considerations
- Naming Entries
- Naming Group Entries
- Naming Other Kinds of Entries
- About Roles
- Deciding Between Roles and Groups
- Directory Tree Design Examples
- Directory Tree for an ISP
- other directory tree resources
- Topology Overview
- Distributing Your Data
- About Using Multiple Databases
- About Suffixes
- About Knowledge References
- The Structure of an LDAP Referral
- About Default Referrals
- Tips for Designing Smart Referrals
- Using Chaining
- Deciding Between Referrals and Chaining
- Usage Differences
- Using Indexes to Improve Database Performance
- Evaluating the Costs of Indexing
- Introduction to Replication
- Replication Concepts
- Unit of Replication
- Change Log
- Replication Agreement
- Common Replication Scenarios
- Multi-Master Replication
- Cascading Replication
- Mixed Environments
- Defining a Replication Strategy
- Replication Survey
- Using Replication for High Availability
- Using Replication for Local Availability
- Example of Network Load Balancing
- Example of Load Balancing for Improved Performance
- Example Replication Strategy for a Small Site
- Using Replication with other Directory Features
- Replication and Database Links
- Schema Replication
- About Security Threats
- Unauthorized Access
- Denial of Service
- Determining Access Rights
- Conducting Regular Audits
- Overview of Security Methods
- Anonymous Access
- Simple Password
- Certificate-Based Authentication
- Proxy Authentication
- Designing a Password Policy
- User-Defined Passwords
- Expiration Warning
- Password Minimum Age
- Designing a Password Policy in a Replicated Environment
- Designing Access Control
- Targets
- Permissions
- Bind Rules
- Setting Permissions
- When to Deny Access
- Using Filtered Access Control Rules
- Securing Connections With SSL
- other security resources
- An Enterprise
- Data Design
- Directory Tree Design
- Topology Design
- Database Topology
- Replication Design
- Supplier Consumer Architecture
- Security Design
- Tuning and Optimizations
- Schema Design
- Server Topology
- Supplier Architecture
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- installation guide
- Table Of Contents
- Table Of Contents
- Table Of Contents
- About This Guide
- Conventions Used In This Guide
- Related Information
- preparing for a directory server installation
- Configuration Decisions
- Choosing Unique Port Numbers
- Deciding the User and Group for Your Netscape Servers (UNIX only)
- Determining Your Directory Suffix
- Determining the Location of the User Directory
- Determining the Administration Domain
- Selecting an Installation Process
- Upgrade Process
- Supported Platforms
- Hardware Requirements
- dsktune Utility
- Verifying Required System Modules
- Tuning the System
- Tuning TCP Parameters
- HP-UX 11.0 Operating System
- Installing Third-Party Utilities
- using express and typical installation
- Using Typical Installation
- silent installation
- Preparing Silent Installation Files
- Creating Silent Installation Files
- A Typical Installation
- Using an Existing Configuration Directory
- Installing the Standalone Netscape Console
- Silent Installation File Format
- General] Installation Directives
- Base] Installation Directives
- slapd] Installation Directives
- Optional [slapd] Installation Directives
- admin] Installation Directives
- Chapter 5 Post Installation
- Populating the Directory Tree
- Migration Overview
- Migration Prerequisites
- Identifying Custom Schema
- Migration Procedure
- Migrating a Replicated Site
- Constraints
- Example: Detail of Steps
- Removing a Directory Server Instance
- uninstalling directory server
- Running dsktune
- Common Installation Problems
- Glossary
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Prerequisite Reading
- Related Information
- Chapter 1 About Schema
- Object Class Inheritance
- Attribute Syntax
- Single-Valued and Multi-Valued Attributes
- Object Identifiers (OIDs)
- Extending Server Schema
- Chapter 2 Object Class Reference
- account
- alias
- cosClassicDefinition
- cosDefinition
- cosIndirectDefinition
- cosPointerDefinition
- cosSuperDefinition
- cosTemplate
- country
- dcObject
- device
- document
- documentSeries
- domain
- domainRelatedObject
- extensibleObject
- friendlyCountry
- groupOfCertificates
- groupOfNames
- groupOfUniqueNames
- groupOfURLs
- inetOrgPerson
- labeledURIObject
- locality
- newPilotPerson
- nsComplexRoleDefinition
- nsFilteredRoleDefinition
- nsLicenseUser
- nsManagedRoleDefinition
- nsNestedRoleDefinition
- nsRoleDefinition
- nsSimpleRoleDefinition
- organization
- organizationalPerson
- organizationalRole
- organizationalUnit
- person
- pilotObject
- pilotOrganization
- residentialPerson
- RFC822LocalPart
- room
- strongAuthenticationUser
- simpleSecurityObject
- abstract
- associatedDomain
- audio
- authorSn
- businessCategory
- cACertificate
- certificateRevocationList
- co (friendlyCountryName)
- cosIndirectSpecifier
- cosTargetTree
- dc (domainComponent)
- departmentNumber
- destinationIndicator
- dITRedirect
- dNSRecord
- documentIdentifier
- documentPublisher
- documentVersion
- dSAQuality
- employeeType
- generationQualifier
- homePhone
- host
- info
- janetMailbox
- keyWords
- labeledURI
- lastModifiedTime
- mailPreferenceOption
- member
- memberURL
- name
- nsLicenseEndTime
- o (organizationName)
- obsoletesDocument
- otherMailbox
- pager
- personalTitle
- physicalDeliveryOfficeName
- postalCode
- preferredLanguage
- protocolInformation
- roleOccupant
- searchGuide
- serialNumber
- sn (surname)
- street
- subtreeMinimumQuality
- supportedApplicationContext
- telexNumber
- title
- uid (userID)
- uniqueMember
- userCertificate
- userPassword
- userSMIMECertificate
- Operational Attributes
- altServer
- copiedFrom
- dITContentRules
- ldapSyntaxes
- nameForms
- nsds5replconflict
- numSubordinates
- objectClasses
- passwordExpWarned
- retryCountResetTime
- supportedControl
- supportedSASLMechanisms
- changeLog
- changeType
- newSuperior
- Special Object Classes
- passwordObject
- subschema
- Index
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- List of Tables
- Introduction
- Prerequisite Reading
- Conventions Used in This Book
- Part 1 Administering Netscape Directory Server
- Overview of Directory Server Management
- Copying Entry DNs to the Clipboard
- Configuring the Directory Manager
- Starting and Stopping the Directory Server
- Configuring LDAP Parameters
- tracking modifications to directory entries
- Starting the Server with SSL Enabled
- Cloning a Directory Server
- Starting the Server in Referral Mode
- using the refer command
- Managing Entries From the Directory Console
- creating a root entry
- creating directory entries
- creating an entry using a predefined template
- modifying directory entries
- displaying the property editor
- adding an attribute to an entry
- removing an attribute value
- deleting directory entries
- Providing Input From the Command Line
- creating a root entry from the command line
- Adding and Modifying Entries Using ldapmodify
- adding entries using ldapmodify
- modifying entries using ldapmodify
- deleting entries using ldapdelete
- using special characters
- LDIF Update Statements
- adding an entry using ldif
- renaming an entry using ldif
- A Note on Renaming Entries
- Adding Attributes to Existing Entries Using LDIF
- changing an attribute value using ldif
- deleting all values of an attribute using ldif
- Deleting an Entry Using LDIF
- Maintaining Referential Integrity
- Using Referential Integrity with Replication
- Configuring the Supplier Server
- From the Directory Server Console
- creating and maintaining suffixes
- Creating Suffixes
- Figure 3-3 A Sample Directory Tree with a Root Suffix Off Limits to Search Operations
- creating a new root suffix using the console
- creating a new sub suffix using the console
- maintaining suffixes
- enabling referrals only during update operations
- Creating and Maintaining Databases
- Creating Databases
- creating a new database for an existing suffix using the console
- adding multiple databases for a single suffix
- adding the custom distribution function to a suffix
- Maintaining Directory Databases
- deleting a database
- Configuring the Chaining Policy
- chaining ldap controls
- Creating a New Database Link
- creating a new database link using the console
- creating a database link from the command line
- Chaining Using SSL
- Maintaining Database Links
- Database Links and Access Control Evaluation
- Advanced Feature: Tuning Database Link Performance
- managing connections to the remote server
- Detecting Errors During Normal Processing
- Managing Threaded Operations
- Advanced Feature: Configuring Cascading Chaining
- configuring cascading chaining defaults using the console
- configuring cascading chaining using the console
- configuring cascading chaining from the command line
- Summary of Cascading Chaining Configuration Attributes
- configuring server one
- configuring server two
- configuring server three
- Using Referrals
- Creating Smart Referrals
- creating smart referrals using the directory server console
- creating smart referrals from the command line
- Creating Suffix Referrals
- Importing Data
- performing an import from the console
- initializing a database from the console
- Importing From the Command Line
- Exporting Data
- exporting directory data to ldif using the console
- exporting a single database to ldif using the console
- exporting to ldif from the command line
- Backing Up All Databases
- backing up all databases from the server console
- backing up a single database
- Backing Up the dse.ldif Configuration File
- restoring your database from the command line
- restoring a single database
- restoring databases that include replicated entries
- Restoring the dse.ldif Configuration File
- Using Groups
- Managing Static Groups
- Managing Dynamic Groups
- Using Roles
- Managing Roles Using the Console
- creating a managed role
- creating a filtered role
- modifying a role entry
- Managing Roles Using the Command Line
- Examples: Managed Role Definition
- Example: Filtered Role Definition
- Example: Nested Role Definition
- Assigning Class of Service
- About CoS
- About the CoS Template Entry
- How a Pointer CoS Works
- How a Classic CoS Works
- Managing CoS Using the Console
- editing an existing cos
- Managing CoS From the Command Line
- creating the cos template entry from the command line
- example of a pointer cos
- Example of an Indirect CoS
- Example of a Classic CoS
- Creating Role-Based Attributes
- access control and cos
- ACI Structure
- ACI Placement
- ACI Limitations
- Default ACIs
- Creating ACIs Manually
- Example ACI
- targeting a directory entry
- Targeting Attributes
- targeting both an entry and attributes
- targeting attribute values using ldap filters
- targeting a single directory entry
- allowing or denying access
- Rights Required for LDAP Operations
- Permissions Syntax
- Bind Rules
- Anonymous Access (anyone Keyword)
- General Access (all Keyword)
- Wildcards
- Examples
- defining access based on value matching
- using the userattr keyword
- using the userattr keyword with inheritance
- granting add permission using the userattr keyword
- defining access from a specific ip address
- defining access from a specific domain
- defining access based on authentication method
- Creating ACIs From the Console
- displaying the access control editor
- viewing current acis
- Access Control Usage Examples
- Granting Anonymous Access
- Granting Write Access to Personal Entries
- Restricting Access to Key Roles
- Granting a Group Full Access to a Suffix
- granting rights to add and delete group entries
- Granting Conditional Access to a Group or Role
- Denying Access
- Setting a Target Using Filtering
- Defining Permissions for DNs That Contain a Comma
- Proxied Authorization ACI Example
- Viewing the ACIs for an Entry
- Macro ACI Example
- Macro ACI Syntax
- Macro Matching for ($dn)
- Macro Matching for [$dn]
- Macro Matching for ($attr.attrName)
- Access Control and Replication
- Compatibility with Earlier Releases
- Managing the Password Policy
- Configuring the Password Policy
- Configuring the Password Policy Using the Command-Line
- Setting User Passwords
- Configuring the Account Lockout Policy
- Configuring the Account Lockout Policy Using the Command Line
- Managing the Password Policy in a Replicated Environment
- Inactivating Users and Roles
- Inactivating User and Roles Using the Console
- Activating User and Roles Using the Console
- Activating User and Roles Using the Command Line
- Setting Resource Limits Using the Console
- Replication Overview
- Change Log
- Replication Identity
- Replication Agreement
- Replication Scenarios
- Cascading Replication
- Summary of Steps for Complex Replication Configurations
- Detailed Replication Tasks
- Configuring Supplier Settings
- Configuring a Read-Write Replica
- Configuring a Read-Only Replica
- Configuring a Hub Supplier
- Creating a Replication Agreement
- Configuring Single-Master Replication
- Configuring Multi-Master Replication
- Configuring the Read-Write Replicas on the Supplier Servers
- Initializing the Replicas for Multi-Master Replication
- Configuring the Read-Only Replica on the Consumer Server
- Configuring the Read-Only Replica on the Hub Supplier
- Configuring the Read-Write Replica on the Supplier Server
- Initializing the Replicas for Cascading Replication
- Deleting the Change Log
- Moving the Change Log to a New Location
- Online Consumer Initialization Using the Console
- Manual Consumer Initialization Using the Command Line
- Exporting a Replica to LDIF
- Forcing Replication Updates From the Console
- Replication Over SSL
- Configuring Replication Over SSL Using the Replication Wizard
- Replication with Earlier Releases
- Configuring Directory Server as a Consumer of a Legacy Directory Server
- Using the Retro Change Log Plug-In
- Enabling the Retro Change Log Plug-In
- Trimming the Retro Change Log
- Retro Change Log and the Access Control Policy
- Solving Common Replication Conflicts
- Solving Naming Conflicts
- Solving Orphan Entry Conflicts
- Solving Potential Interoperability Problems
- Overview of Extending Schema
- Managing Attributes
- creating attributes
- editing attributes
- Managing Object Classes
- viewing object classes
- creating object classes
- editing object classes
- Turning Schema Checking On and Off
- About Indexes
- About Index Types
- About Default, System, and Standard Indexes
- Overview of System Indexes
- Overview of Standard Indexes
- balancing the benefits of indexing
- Creating Indexes
- Creating Indexes From the Command Line
- Adding an Index Entry
- Running the db2index.pl Script
- creating browsing indexes from the server console
- Creating Browsing Indexes from the Command Line
- Running the vlvindex Script
- Deleting Indexes
- Deleting Indexes From the Server Console
- Deleting Indexes From the Command Line
- Deleting Browsing Indexes From the Server Console
- Deleting Browsing Indexes From the Command Line
- Managing Indexes
- When All IDs Threshold is Too Low
- All IDs Threshold Tuning Advice for Service Providers and Extranets
- Changing the All IDs Threshold Value
- Attribute Name Quick Reference Table
- Chapter 11 Managing SSL
- Obtaining and Installing Server Certificates
- Activating SSL
- Setting Security Preferences
- Using Certificate-Based Authentication
- Configuring LDAP Clients to Use SSL
- Viewing and Configuring Log Files
- Defining a Log File Rotation Policy
- Access Log
- Error Log
- Configuring the Error Log
- Audit Log
- manual log file rotation
- Monitoring Server Activity
- General Information (Server)
- Current Resource Usage
- Connection Status
- Global Database Cache Information
- Monitoring Database Activity
- Viewing Database Performance Monitors
- Database Cache Information Table
- Database File-Specific Table
- Monitoring Databases From the Command Line
- Monitoring Database Link Activity
- About SNMP
- NMS-Initiated Communication
- Overview of the Directory Server Management Information Base
- The Entries Table
- Setting Up SNMP
- Configuring the AIX SNMP Daemon
- Starting and Stopping the SNMP Service on Windows NT
- Configuring SNMP for the Directory Server
- Tuning Server Performance
- Tuning Database Performance
- Optimizing Search Performance
- Tuning Transaction Logging
- Changing the Location of the Database Transaction Log
- Disabling Durable Transactions
- Specifying Transaction Batching
- Avoid Creating Entries Under the cn=config Entry in the dse.ldif File
- Part 2 Plug-Ins Reference
- bit Check Plug-In
- ACL Plug-In
- ACL Preoperation Plug-In
- Boolean Syntax Plug-In
- Case Ignore String Syntax Plug-In
- Class of Service Plug-In
- Generalized Time Syntax Plug-In
- Integer Syntax Plug-In
- ldbm Database Plug-In
- Legacy Replication Plug-In
- Octet String Syntax Plug-in
- CRYPT Password Storage Plug-In
- SHA Password Storage Plug-In
- SSHA Password Storage Plug-In
- PTA Plug-In
- Retro Change Log Plug-In
- Roles Plug-In
- Telephone Syntax Plug-In
- URI Plug-in
- How Directory Server Uses PTA
- PTA Plug-In Syntax
- Configuring the PTA Plug-In
- configuring the servers to use a secure connection
- specifying the authenticating directory server
- configuring the optional parameters
- PTA Plug-In Syntax Examples
- Specifying One Authenticating Directory Server and Multiple Subtrees
- Overview of the Attribute Uniqueness Plug-In
- Overview of the UID Uniqueness Plug-in
- Configuring Attribute Uniqueness Plug-Ins
- specifying a suffix or subtree
- using the markerobjectclass and requiredobjectclass keywords
- Attribute Uniqueness Plug-In Syntax Examples
- specifying one attribute and multiple subtrees
- Replication and the Attribute Uniqueness Plug-In
- Overview of IM Presence Information
- Schema For the Presence Plug-In
- Performance-Related Information
- Setting Resource Limits Based on Bind DN
- Part 3 Appendixes
- LDIF File Format
- Continuing Lines in LDIF
- Specifying Directory Entries Using LDIF
- specifying organizational unit entries
- specifying organizational person entries
- defining directories using ldif
- LDIF File Example
- Storing Information in Multiple Languages
- Finding Entries Using the Server Console
- Using ldapsearch
- Commonly Used ldapsearch Options
- ldapsearch Examples
- Returning All Entries
- Using LDAP_BASEDN
- Specifying DNs that Contain Commas in Search Filters
- Search Filter Syntax
- Using Operators in Search Filters
- Using Compound Search Filters
- Search Filter Examples
- Searching an Internationalized Directory
- Matching Rule Filter Syntax
- Using Wildcards in Matching Rule Filters
- International Search Examples
- Less Than or Equal to Example
- Greater Than Example
- Appendix C LDAP URLs
- Escaping Unsafe Characters
- Examples of LDAP URLs
- About Locales
- Identifying Supported Locales
- Supported Language Subtypes
- Glossary
- Index
- Table Of Contents
NETSCAPE DIRECTORY SERVER 6.02
Table of contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Table Of Contents
- Preface
- Document Conventions
- Where to Find Directory Server Information
- Part 1 Introduction to Directory Server Plug-Ins
- What Are Directory Server Plug-Ins
- How Directory Server Plug-Ins Work
- Calling Directory Server Plug-In Functions
- Types of Directory Server Plug-Ins
- Including the API Header File
- Working with Parameter Blocks
- Setting Data in the Parameter Block
- Calling Front-End Functions
- Writing Plug-in Initialization Functions
- Specifying Directory Server Compatibility
- Registering Your Plug-In Functions
- Returning a Value to the Directory Server
- Compiling a Directory Server Plug-In
- Creating a Plug-In Configuration File
- Plug-In Dependencies
- Plug-In Type Dependencies
- Summary of Plug-In Directives
- Loading the Plug-In Configuration File
- Passing Extra Arguments to Plug-Ins
- Setting the Log Level of the Server
- Writing the Plug-In Example
- Compiling the Plug-In Example
- Registering the Plug-In Example
- Running the Plug-In Example
- Part 2 Basic Plug-In Programming Techniques
- Logging Messages
- Sending Data to the Client
- Working with Entries, Attributes, and Values
- Creating a New Entry
- Getting and Setting the DN of an Entry
- Getting the Attributes and Values of an Entry
- Working with DNs and RDNs
- Working with DN Suffixes
- Working with Search Filters
- Determining if an Entry Matches a Filter
- Getting the Search Criteria
- Converting a String to a Filter
- How Pre/Post-Operation Plug-Ins Work
- Types Pre-Operation and Post-Operation Functions
- Types of Post-Operation Functions
- Specifying Start and Close Functions
- Getting and Setting Parameters for the Bind Operation
- Processing an LDAP Search Operation
- Getting the List of Candidates
- Iterating Through Candidates
- Processing an LDAP Compare Operation
- Processing an LDAP Modify Operation
- Processing an LDAP Modify RDN Operation
- Processing an LDAP Delete Operation
- Understanding Authentication Methods
- How the Directory Server Identifies Clients
- Writing Your Own Authentication Plug-in
- Defining Your Authentication Function
- Getting the Entry and Checking the Credentials
- What to Do If Authentication Fails
- Registering the SASL Mechanism
- Example of a Pre-Operation Bind Plug-In
- Example of an Initialization Function
- Registering the Plug-In
- Using SASL with an LDAP Client
- Part 3 Advanced Programming Techniques
- How Entry Store/Fetch Plug-Ins Work
- Writing Entry Store/Fetch Functions
- How Extended Operation Plug-Ins Work
- Writing Extended Operation Functions
- Registering Extended Operation Functions
- Understanding Matching Rules
- Extensible Match Filters
- Extensible Match Filters in the Directory Server
- How Matching Rules Are Identified
- How the Server Associates Plug-Ins with OIDs
- Finding a Plug-In for Searching
- How the Server Uses Parameter Blocks
- How the Server Updates the Index
- Writing the Indexer Factory Function
- Getting and Setting Parameters in Indexer Factory Functions
- Writing the Indexer Function
- Getting and Setting Parameters in Indexer Functions
- How the Server Handles the Filter
- Query Operators in Matching Rules
- Writing a Filter Factory Function
- Getting and Setting Parameters in Filter Factory Functions
- Writing a Filter Index Function
- Getting and Setting Parameters in Filter Index Functions
- Writing a Filter Matching Function
- Handling Sorting by Matching Rules
- Writing a Destructor Function
- About Distributing Flat Namespaces
- Creating a Distribution Function
- Adding the Distribution Function to Your Directory
- Adding Multiple Databases to a Single Suffix
- Adding Distribution Logic to a Suffix
- Using the Distribution Logic Examples
- Custom Distribution Checklist
- Part 4 Reference
- Summary of Data Types and Structures
- Distribution Routines
- Functions for Access Control
- Functions for Internal Operations and Plug-In Callback
- Functions for Setting Internal Operation Flags
- Functions for Handling Attributes
- Functions for Managing Backend Operations
- Functions for Dealing with Controls
- Functions for Syntax Plug-In
- Functions for Managing Memory
- Functions for Managing DNs
- Functions for Managing Entries
- Functions Related to Entry Flags
- Functions for Dealing with Filters
- Functions Specific to Extended Operation
- Functions Specific to Bind Methods
- Functions for Thread-Safe LDAP Connections
- Functions for Logging
- Functions for Handling Matching Rules
- Functions for LDAPMod Manipulation
- Functions for Monitoring Operations
- Functions for Managing Parameter Block
- Functions for Handling Passwords
- Functions for Managing RDN
- Functions for Managing Roles
- Functions for Sending Entries and Results to the Client
- Functions Related to UTF-8
- Functions for Handling Values
- Functions for Handling Valueset
- Functions Specific to Virtual Attribute Service
- Functions for Managing Locks and Synchronization
- functions for manipulating bits
- Functions for Registering Object Extensions
- Parameters for Registering Plug-In Functions
- Post-Operation/Data Notification Plug-Ins
- Extended Operation Plug-Ins
- Matching Rule Plug-Ins
- Information About the Database
- Information About the Connection
- Information About the Operation
- Notes in the Access Log
- Information About the Plug-In
- Types of Plug-Ins
- Parameters for the Configuration Function
- Parameters for the Search Function
- Parameters for the Add Function
- Parameters for the Compare Function
- Parameters for the Modify Function
- Parameters for the Modify RDN Function
- Parameters for the Abandon Function
Related products
NETSCAPE DIRECTORY SERVER 6.0NETSCAPE DIRECTORY SERVER 6.01NETSCAPE DIRECTORY SERVER 6.02 - PLUG-INNETSCAPE DIRECTORY SERVER 7.0NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENTNETSCAPE DIRECTORY SERVER 6.01 - PLUG-INNETSCAPE DIRECTORY SERVER 6.02 - ADMINISTRATORNETSCAPE DIRECTORY SERVER 6.0 - DEPLOYMENTNETSCAPE DIRECTORY SERVER 6.1 - PLUG-INNETSCAPE DIRECTORY SERVER 6.2 - PLUG-INNetscape categories
More Netscape categoriesmanualsdatabase
Your AI-powered manual search engine