manualshive.com logo in svg

Netscape NETSCAPE DIRECTORY SERVER 6.02, Installation Manual

Share
Download
Netscape NETSCAPE DIRECTORY SERVER 6.02 Installation Manual Download Page 5

5

Migrating a Replicated Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

Constraints . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Approach . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Example: Detail of Steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

Chapter

7 Uninstalling Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

Removing a Directory Server Instance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Uninstalling Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

Chapter

8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

Running dsktune . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Common Installation Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

Summary of Contents for NETSCAPE DIRECTORY SERVER 6.02

Page 1: ...Installation Guide Netscape Directory Server Version6 02 May 2002 ...

Page 2: ... 2002 Netscape Communications Corporation All rights reserved Portions of the Software copyright 1995 PEER Networks Inc All rights reserved The Software contains the Taligent International Classes from Taligent Inc and IBM Corp Portions of the Software copyright 1992 1998 Regents of the University of Michigan All rights reserved The software contains encryption software from RSA Security Inc Copyr...

Page 3: ...X only 14 Defining Authentication Entities 14 Determining Your Directory Suffix 16 Determining the Location of the Configuration Directory 16 Determining the Location of the User Directory 17 Determining the Administration Domain 18 Installation Process Overview 18 Selecting an Installation Process 19 Upgrade Process 20 Unpacking the Software 20 Installation Privileges 20 Chapter 2 Computer System...

Page 4: ...tion 41 Using Silent Installation 41 Preparing Silent Installation Files 42 Creating Silent Installation Files 43 A Typical Installation 44 Using an Existing Configuration Directory 45 Installing the Standalone Netscape Console 46 Installation Directives 46 Silent Installation File Format 47 General Installation Directives 48 Base Installation Directives 49 slapd Installation Directives 50 Require...

Page 5: ...roach 65 Example Detail of Steps 66 Chapter 7 Uninstalling Directory Server 69 Removing a Directory Server Instance 69 Uninstalling Directory Server 70 Chapter 8 Troubleshooting 73 Running dsktune 73 Common Installation Problems 75 Glossary 77 Index 93 ...

Page 6: ...6 Netscape Directory Server Installation Guide May 2002 ...

Page 7: ...age 8 Related Information page 9 Prerequisite Reading Before you install Directory Server we recommend that you read the Netscape Directory Server Deployment Guide This guide covers key concepts on how to design and plan your directory service After you finish planning your directory service follow the steps in this installation guide to install the Directory Server and its related software compon...

Page 8: ... also used for filenames functions and examples The greater than symbol is used as a separator for successive menu selections For example Object New User means that you should pull down the Object menu drag the mouse down to highlight New and drag the mouse across to the New submenu in which you must select User Throughout this book you will see path references of the form usr netscape servers sla...

Page 9: ...r Configuration Command and File Reference Contains information about using the command line scripts shipped with Directory Server Netscape Directory Server Schema Reference Contains information about the Directory Server schema Netscape Directory Server Plug In Programmer s Guide Describes how to write server plug ins in order to customize and extend the capabilities of Directory Server For a lis...

Page 10: ...Related Information 10 Netscape Directory Server Installation Guide May 2002 ...

Page 11: ...ver Deployment Guide contains basic directory concepts as well as guidelines to help you design and successfully deploy your directory service Be sure you understand the concepts presented in this manual before proceeding with the installation process Installation Components Directory Server contains the following software components Netscape Console Netscape Console provides the common user inter...

Page 12: ...on Process Overview on page 18 for details Configuration Decisions During Directory Server installation you are prompted for basic configuration information Decide how you are going to configure these basic parameters before you begin the installation process You are prompted for some or all of following information depending on the type of installation that you decide to perform Port number see C...

Page 13: ...se Additionally if you are using both LDAP and LDAPS communications make sure the port numbers chosen for these two types of access are not identical For information on how to set up LDAP over SSL LDAPS for Directory Server see the Netscape Directory Server Administrator s Guide Creating a New Server Root Your server root is the directory where you install your Netscape servers The default server ...

Page 14: ...ount and must not use the nobody account Also you should create a common group for the directory server files again you must not use the nobody group The user and group under which you will run Administration Server For installations that use the default port numbers this must be root However if you use ports over 1024 then you should create a user account for all Netscape servers and run Administ...

Page 15: ...tscape servers accessible through Netscape Console If you log in with this user ID then you can administer any Netscape server that you can see in the server topology area of Netscape Console For security the configuration directory administrator should not be the same as the directory manager The default configuration directory administrator ID is admin Administration Server User and password You...

Page 16: ...n directory If you are installing Directory Server to use as part of a general directory service then you will have multiple Directory Servers installed in your enterprise and you must decide which one will host the configuration directory tree o NetscapeRoot You must make this decision before you install any Netscape servers including Directory Server For ease of upgrades you should use a Directo...

Page 17: ...whelming percentage of the directory traffic For this reason you should give the user directory the greatest computing resources Because the configuration directory should receive very little traffic it can be installed on a machine with very low end resources such as a minimally equipped Pentium Also you should use the default directory ports 389 and 636 for the user directory If your configurati...

Page 18: ... to Each administration domain can be configured with an administration domain owner This owner has complete access to all the servers in the domain but does not have access to the servers in any other administration domain The administration domain owner can grant individual users administrative access on a server by server basis within the domain For many installations you can have just one admi...

Page 19: ...alize the user directory database that is created by default Silent Installation Use this if you want to script your installation process This is especially useful for installing multiple consumer servers around your enterprise Silent install is described in Chapter 4 Silent Installation Beyond determining which type of installation process you will use the process for installing Directory Server ...

Page 20: ...ver software from the web site you will need to unpack it before beginning installation 1 Create a new directory for the installation mkdir ds cd ds 2 Download the product binaries file to the installation directory 3 On UNIX unpack the product binaries file using the following command gzip dc filename tar gz tar xvof where filename corresponds to the product binaries that you want to unpack Insta...

Page 21: ... Supported Platforms page 21 Hardware Requirements page 22 Operating System Requirements page 22 Supported Platforms This release of Directory Server is supported on the following platforms Sun Solaris 8 for UltraSPARC 32 bit operating environment Hewlett Packard HP UX 11 0 PA RISC 1 1 or 2 0 NOTE Before you install Directory Server check the required patches and kernel parameter settings as descr...

Page 22: ...nding on the number of entries managed by your Directory Server This assumes entries in the LDIF file are approximately 100 bytes in size and only the recommended indexes are configured If you are using larger entries make sure that at least four times the size of the LDIF file is available on disk Operating System Requirements This section contains information on operating system versions and pat...

Page 23: ...mended patch cluster is installed Solaris patches are identified by two numbers for example 106125 10 The first number 106125 identifies the patch itself The second number identifies the version of the patch in the example above the patch is version number 10 We recommend installing the latest version of the patch in order to benefit from the latest fixes See the Solaris Operating Environment Secu...

Page 24: ...machine after installing these patches In addition to the patches listed here you may want to install the latest patch cluster for your version of Solaris which includes additional recommended and security patches The Sun recommended patch clusters can be obtained from your Solaris support representative or from http sunsolve sun com Table 2 1 Solaris 8 Patch List 108528 09 SunOS 5 8 kernel update...

Page 25: ...e patch 109742 04 SunOS 5 8 kernel drv icmp patch 109783 01 SunOS 5 8 usr lib nfs nfsd patch 109805 03 SunOS 5 8 pam_krb5 so 1 patch 109898 02 SunOS 5 8 kernel drv arp patch 109951 01 SunOS 5 8 jserver buffer overflow 110075 01 SunOS 5 8 kernel drv devinfo and kernel drv sparcv9 devinfo patch 110283 03 SunOS 5 8 mkfs and newfs patch 110286 02 SunOS 5 8 mkfs and newfs patch 110322 01 SunOS 5 8 usr ...

Page 26: ...s not present the maximum is 1024 It can be raised to 4096 by adding to etc system a line set rlim_fd_max 4096 and rebooting the system 110934 01 SunOS 5 8 pkgtrans pkgadd pkgchk and libpkg a patch 110939 01 SunOS 5 8 usr lib acct closewtmp patch 110943 01 SunOS 5 8 usr bin tcsh patch 110945 01 SunOS 5 8 usr sbin syslogd patch 110951 01 SunOS 5 8 usr sbin tar and usr sbin static tar patch 111071 0...

Page 27: ...ously these values should be raised to at least 1024 by adding a line similar to the following to the etc init d inetinit file ndd set dev tcp tcp_conn_req_max_q0 1024 ndd set dev tcp tcp_conn_req_max_q 1024 The tcp_keepalive_interval specifies the interval in seconds between keepalive packets sent by Solaris for each open TCP connection This can be used to remove connections to clients that have ...

Page 28: ...UX 11 environment but will run as a 32 bit process and is limited to 1 GB of process memory For best results Directory Server requires an HP 9000 architecture with a PA RISC 1 1 or PA RISC 2 0 CPU Installing Patches Before you install Directory Server ensure that the host system is updated with the latest patches recommended by the operating system vendor Because the list of recommended patches ch...

Page 29: ... and is superceded by PHCO_24148 PHCO_24148 libc cumulative patch supercedes PHCO_20765 PHKL_17709 libpthread cumulative patch superceded by PHKL_17935 PHSS_16587 HP aC runtime libraries PHKL_20335 boot Jfs IO perf PA8600 3GB data NFS bcache PHKL_20174 Allow sam to set maxdsize patch PHCO_21187 Cumulative SAM ObAM patch PHSS_25290 Xserver cumulative patch PHSS_25091 Font Server JAN 99 Cumulative P...

Page 30: ...e your maxdsize kernel parameter is at least 1000 20000 4096 or at least 21 MB Set max_thread_proc max number of threads per process to 128 Set ncallout max number of pending timeouts to 128 NPROC Set maxfiles to at least 120 You also need to turn on large file support in order for Directory Server to work properly To change an existing file system from one that has no large files to one that acce...

Page 31: ...lled you can download it from http www adobe com products acrobat readstep2 html DNS and NIS Requirements UNIX only Prior to installation it is necessary to have configured the DNS resolver and NIS domain name The DNS resolver is typically set by the file etc resolv conf However also check the file etc nsswitch conf and on Solaris etc netconfig to ensure that the DNS resolver will be used for name...

Page 32: ...Operating System Requirements 32 Netscape Directory Server Installation Guide May 2002 ...

Page 33: ...oes not offer you the choice of selecting your server port number or your directory suffix you should not use it for production installations To perform an express installation do the following 1 On UNIX machines log in as root root login is required for express installation 2 Create a new directory mkdir ds cd ds 3 If you have not already done so download the product binaries file to the installa...

Page 34: ...y that you specify does not exist the setup program creates it for you 9 UNIX only For the user and group to run the servers as enter the identity that you want this server to run as For more information on the user and groups that you should use when running Netscape servers see Deciding the User and Group for Your Netscape Servers UNIX only on page 14 10 For Configuration Directory Administrator...

Page 35: ...d the product binaries file to the installation directory 4 Unpack the product binaries file using the following command gunzip dc filename tar gz tar xvof where filename corresponds to the product binaries that you want to unpack 5 Run the setup program You can find it in the directory where you untarred binary files Issue the following command from the installation directory setup 6 The setup pr...

Page 36: ...mponents Directory Suite Administration Services nsPerl and PerLDAP press Enter to select the default all components 12 Press Enter to select all of the Server Products Core Components 13 Press Enter to select all the Directory Suite components 14 Press Enter to select all of the Administration Services components Netscape Administration Server and the Administration Server Console 15 Press Enter ...

Page 37: ...y installing will be the one for your user data For most cases you can select the default However if you intend this server instance to be used as a configuration directory only then you should enter Yes 21 For the Directory Server port select the default 389 unless you already have another application using that port 22 For the Directory Server Identifier enter a unique value normally the default...

Page 38: ...any suffix configured for your directory However it should not correspond to an actual entry stored in your directory 26 For the Directory Manager password enter a value that is at least 8 characters long 27 For Administration Domain enter the domain that you want this server to belong to The name you enter should be a unique string that is descriptive of the organization responsible for administe...

Page 39: ...he suffix that you configured o NetscapeRoot Do not modify the contents of the directory under the o NetscapeRoot suffix Either create data under the first suffix or create a new suffix to be used for this purpose For details on how to create new suffixes for your Directory Server see the Netscape Directory Server Administrator s Guide ...

Page 40: ...Using Typical Installation 40 Netscape Directory Server Installation Guide May 2002 ...

Page 41: ...ng Silent Installation Files page 42 Installation Directives page 46 Using Silent Installation To use silent installation you call the setup program with the s and f command line options That is to use silent installation 1 On UNIX machines log in as root 2 Create a new directory mkdir ds cd ds 3 If you have not already done so download the product binaries file to the installation directory 4 On ...

Page 42: ... server instances must be created For Directory Server it is especially useful for heavily replicated sites that will create a large number of consumer servers This section first describes how to create silent installation files It then provides examples of using silent installation to support the following common installation scenarios A Typical Installation Using an Existing Configuration Direct...

Page 43: ... best not to use this directive because FullMachineName will then default to the local host name However if you use custom installation to generate your initial server instance then this directive will appear in the install inf file Set the ServerIpAddress directive appropriate for the local machine The same usage rules apply for ServerIpAddress as for FullMachineName Specifically try to not inclu...

Page 44: ...gDirectoryAdminID admin ConfigDirectoryAdminPwd admin ConfigDirectoryLdapURL ldap dir example com 389 o NetscapeRoot UserDirectoryAdminID admin UserDirectoryAdminPwd admin UserDirectoryLdapURL ldap dir example com 389 o example com Components svrcore base slapd admin nsperl perldap slapd SlapdConfigForMC Yes SecurityOn No UseExistingMC No UseExistingUG No ServerPort 389 ServerIdentifier dir Suffix...

Page 45: ...e com ConfigDirectoryAdminID admin ConfigDirectoryAdminPwd admin ConfigDirectoryLdapURL ldap dir example com 25389 o NetscapeRoot UserDirectoryLdapURL ldap dir example com 18257 dc example dc com UserDirectoryAdminID cn Directory Manager UserDirectoryAdminPwd admin123 Components svrcore base slapd admin nsperl perldap slapd SlapdConfigForMC No SecurityOn No UseExistingMC yes UseExistingUG No Serve...

Page 46: ...ile Specifically the following sections are provided here ServerAdminID admin ServerAdminPwd admin Components admin admin client base Components base base client base jre nsperl Components nsperl553 perldap Components perldap14 General FullMachineName dir example com ConfigDirectoryLdapURL ldap dir example com 389 o NetscapeRoot SuiteSpotUserID nobody SuitespotGroup nobody ConfigDirectoryAdminID a...

Page 47: ...installation information in a file This file is formatted as follows The keywords General slapd and admin are required They indicate that the directives that follow are meant for a specific aspect of the installation They must be provided in the file in the order indicated above General directive value directive value directive value Base directive value directive value directive value slapd direc...

Page 48: ...ed for most deployments SuitespotGroup UNIX only Specifies the group that Netscape servers will run as The default is group nobody but this should be changed for most deployments ServerRoot Specifies the full path to the directory where the Netscape server binaries are installed This directive is required AdminDomain Specifies the administration domain under which this server will be registered Se...

Page 49: ...irectory is used for this purpose LDAP URLs are described in the Netscape Directory Server Administrator s Guide Components Specifies components to be installed The list of available components will differ depending on the Netscape servers available on your installation media For stand alone directory installation the list of components is svrcore uninstallation binaries base the base installation...

Page 50: ...pecifies the base components to be installed The base components are base install the shared libraries used by all Server Consoles You must install this package if you are also installing some other Netscape server base client install the Java run time environment used by the Server Consoles base jre causes the Java run time environment to be installed This directive is required if you are install...

Page 51: ...es the suffix under which you will store your directory data For information on suffixes see Determining Your Directory Suffix on page 16 This directive is required RootDN Specifies the distinguished name used by the directory manager For information on the directory manager see Defining Authentication Entities on page 14 This directive is required RootDNPwd Specifies the directory manager s passw...

Page 52: ...y with Default is no AddOrgEntries If set to Yes this directive causes the new Directory Server instance to be created with a suggested directory structure and access control If this directive is used and InstallLdifFile is also used then this directive has no effect Default is no InstallLdifFile Causes the contents of the specified LDIF file to be used to populate your directory Table 4 5 admin I...

Page 53: ...minID directive See Defining Authentication Entities on page 14 for information on this directive ServerAdminPwd Specifies the password for ServerAdminID Components Specifies the admin components to be installed The base components are admin install the Administration Server You must install the Administration Server if you are also installing some other Netscape server admin client install Netsca...

Page 54: ...Installation Directives 54 Netscape Directory Server Installation Guide May 2002 ...

Page 55: ...dministration Server The machine running Directory Server Console needs access to Administration Server To configure Administration Server to accept the client machine s IP address do the following in Administration Server 1 Launch Administration Server Console The console should be running on the same machine as Administration Server 2 Click the Configuration tab then click the Network tab 3 In t...

Page 56: ...f acceptable IP addresses Populating the Directory Tree During installation a simple directory database was created for you In addition a simple directory structure was placed in the database for you to use This directory structure contained basic access control and the major branch points for the recommended directory structure Now you need to populate your database with user entries There are se...

Page 57: ...hod if you have just a few entries to add at a time For information on setting up the Directory Server Gateway check the Netscape Directory Server Gateway Customization Guide This document is provided with Netscape Directory Server Resource Kit As you are populating your directory consider your access control needs and set access control accordingly For more information on access control see the N...

Page 58: ...Populating the Directory Tree 58 Netscape Directory Server Installation Guide May 2002 ...

Page 59: ...age 63 Migrating a Replicated Site page 64 This chapter does not explain how to upgrade from Innosoft Distributed Directory Server 4 5 1 That process is described in the Innosoft Distributed Directory Server Transition Guide Migration Overview Before you migrate your directory service you should become familiar with the new features offered in this release of the Directory Server The migration pro...

Page 60: ...rates replication entries change log Migrates the SNMP configuration The migration script shuts down your legacy Directory Server before performing the migration process The migration script also backs up your current configuration Migration Prerequisites This section lists the prerequisites that your system must meet before you can consider beginning the migration process You must be using Direct...

Page 61: ...stom schema that you created in a 5 0 Directory Server must be stored in an LDIF file in the usr netscape servers slapd serverID config schema directory The migration script does not migrate any data from Directory Server 4 x to 6 02 if both have the same suffix name To ensure data migration install your new Directory Server with some dummy suffix names On UNIX set the following environment variab...

Page 62: ...sues 2 Move your custom schema elements to the following files usr netscape servers slapd serverID config slapd user_at conf and usr netscape servers slapd serverID config slapd user_oc conf These file names are recommended because the 4 x schema configuration editor writes to them However you can use any file name you like Note that if there are inheritance relationships between custom defined ob...

Page 63: ...p your legacy Directory Server If you do not stop the legacy Directory Server the migration script does it for you 2 On the machine where your legacy Directory Server is installed install a new Directory Server The installation process is described in Chapter 3 Using Express and Typical Installation or Chapter 4 Silent Installation Use the same port numbers as your legacy production server if you ...

Page 64: ...e config slapd conf Suffix o example com doesn t exist Backend MigratedDB_0 has been created Suffix dc example dc com doesn t exist Backend MigratedDB_1 has been created For the suffix o NetscapeRoot we do nothing Update general server parameters Update successfully passwordHistory Update global LDBM parameters Update successfully nsslapd mode Update specific backend parameters Migrate DSE entries...

Page 65: ...y servers must be a valid topology The new 6 x Directory Server must be a consumer of a 4 x Directory Server The 6 x Directory Server must be configured as a legacy consumer The replication agreement between the 4 x supplier server and the 6 x consumer server must be a 4 x supplier initiated replication agreement Approach Given the constraints the approach to migrating a replication topology of 4 ...

Page 66: ...topology that is as a read write replica that logs changes This procedure is explained in the Replication chapter in the Netscape Directory Server Administrator s Guide 3 Then configure Server D to be a legacy consumer This procedure is explained in the Replication chapter in the Netscape Directory Server Administrator s Guide 4 Upgrade Server B to Directory Server 6 x following the instructions g...

Page 67: ...e supplier for consumer servers B and C When you have completed the migration of your replication topology you can evolve it to use multi master replication To do this you must add a new Directory Server 6 x that acts as a master to your replication topology You cannot change one of the read only replicas to become a read write replica For more information on multi master replication topologies re...

Page 68: ...Migrating a Replicated Site 68 Netscape Directory Server Installation Guide May 2002 ...

Page 69: ...e Netscape Console to remove the server instance from your machine Removing a Directory Server instance is not the same as uninstalling the Directory Server when you uninstall the Directory Server its program files are deleted from the host machine when you remove a Directory Server instance only the selected instance is removed leaving behind the configuration directory and Administration Server ...

Page 70: ...m 1 Log in to your system as super user root 2 Navigate to the directory where Directory Server is installed The default path is usr netscape servers 3 Run uninstall 4 Select the default All to remove all components of Directory Server Alternately you may choose to remove individual components by selecting them from the list that appears on the screen Administration Services Netscape Directory Sui...

Page 71: ... removal of Directory Server The uninstallation utility starts removing files After the utility has finished removing files a message is displayed indicating that some files have not been removed from your system 6 Go to the installation directory and manually remove any remaining files to complete the uninstallation process Be sure to check the tmp install log file for details about the uninstall...

Page 72: ...Uninstalling Directory Server 72 Netscape Directory Server Installation Guide May 2002 ...

Page 73: ...atch levels and kernel parameter settings for your system You must install the Directory Server before you can run dsktune On Solaris platform if you run the dsktune utility you need to be aware that it will report as missing any of the patches from the Sun recommended patch list that are not installed on your system even if they relate to packages that you have not installed To run dsktune 1 Chan...

Page 74: ...urrently 128 which will limit the value of listen backlog which can be configured It can be raised by adding to etc init d inetinit after any adb command a line similar to ndd set dev tcp tcp_conn_req_max_q 1024 NOTICE The tcp_keepalive_interval is set to 7200000 milliseconds 120 minutes This may cause temporary server congestion from lost client connections NOTICE The tcp_keepalive_interval can b...

Page 75: ...me If that does not work use the fully qualified name such as www domain com and make sure the server is listed in the DNS If that does not work use the IP address If your NIS domain is different from your DNS domain the fully qualified host and domain name presented by the installer may be incorrect These values must be corrected to use the DNS domain name The port is in use You probably did not ...

Page 76: ... have forgotten the Directory manager DN and password You can find out what the Directory Manager DN is by examining usr netscape servers slapd server ID config dse ldif and looking for the nsslapd rootdn attribute If you have forgotten the Directory Manager DN password you can reset it by doing the following 1 Find the nsslapd rootpw attribute in slapd conf If the attribute value is not encrypted...

Page 77: ...Disables a user account group of accounts or an entire domain so that all authentication attempts are automatically rejected All IDs Threshold A size limit which is globally applied to every index key managed by the server When the size of an individual ID list reaches this limit the server replaces that ID list with an All IDs token All IDs token A mechanism which causes the server to assume that...

Page 78: ...ons or access files and directories based on the permissions granted to that user by the directory administrator 2 Allows a client to make sure they are connected to a secure server preventing another computer from impersonating the server or attempting to appear secure when it is not authentication certificate Digital file that is not transferable and not forgeable and is issued by a third party ...

Page 79: ...ect attributes Certificate Authority Company or organization that sells and issues authentication certificates You may purchase an authentication certificate from a Certification Authority that you trust Also known as a CA CGI Common Gateway Interface An interface for external programs to communicate with the HTTP server Programs written to use CGI are called CGI programs or CGI scripts and can be...

Page 80: ...orted This information might include the sequence of letters in the alphabet or how to compare letters with accents to letters without accents consumer Server containing replicated directory trees or subtrees from a supplier server consumer initiated replication Replication configuration where consumer servers pull directory data from supplier servers consumer server In the context of replication ...

Page 81: ...tree s root point appearing at the top of the hierarchy Also known as DIT Directory Manager The privileged database administrator comparable to the root user in UNIX Access control does not apply to the directory manager Directory Server Gateway DSGW A collection of CGI forms that allows a browser to perform LDAP client functions such as querying and accessing a Directory Server from a web browser...

Page 82: ...dex Allows you to search efficiently for entries containing a specific attribute value file extension The section of a filename after the period or dot that typically defines the type of file for example GIF and HTML In the filename index html the file extension is html file type The format of a given file For example graphics files are often saved in GIF format while a text file is usually saved ...

Page 83: ...of replication a server that holds a replica that is copied from a different server and in turn replicates it to a third server See also cascading replication index key Each index that the directory uses is composed of a table of index keys and matching entry ID lists indirect CoS An indirect CoS identifies the template entry using the value of one of the target entry s attributes international in...

Page 84: ...rm leaf entry An entry under which there are no other entries A leaf entry cannot be a branch point in a directory tree Lightweight Directory Access Protocol See LDAP locale Identifies the collation order character type monetary format and time date format used to present data for users of a specific region culture and or custom This includes information on how data of a given language is interpre...

Page 85: ... named and referenced Also called the directory tree monetary format Specifies the monetary symbol used by specific region whether the symbol goes before or after its value and how monetary units are represented multi master replication An advanced replication scenario in which two servers each hold a copy of the same read write replica Each server maintains a change log for the replica Modificati...

Page 86: ...bute in an object oriented system Object identifiers are assigned by ANSI IETF or similar organizations OID See object identifier operational attributes Operational attributes contain information used internally by the directory to keep track of modifications and subtree properties They are not returned in response to a search unless explicitly requested parent access When granted indicates that u...

Page 87: ...a proxy DN proxy DN Used with proxied authorization The proxy DN is the DN of an entry that has access permissions to the target on which the client application is attempting to perform an operation PTA Pass through authentication Mechanism by which one directory server consults another to check bind credentials PTA directory server In pass through authentication PTA the PTA directory server is th...

Page 88: ...eplicas A server can hold any number of read only replicas read write replica A replica that contains a master copy of directory information and can be updated A server can hold any number of read write replicas relative distinguished name See RDN replication Act of copying directory trees or subtrees from supplier servers to consumer servers replication agreement Set of configuration parameters t...

Page 89: ...granted indicates that users have access to their own entries that is if the bind DN matches the targeted entry Server Console Java based application that allows you to perform administrative management of your Directory Server from a GUI server daemon The server daemon is a process that once running listens for and accepts requests from clients server root A directory on the server machine dedica...

Page 90: ...tained by default sub suffix A branch underneath a root suffix subagent See SNMP subagent substring index Allows for efficient searching against substrings within entries Substring indexes are limited to a minimum of two characters for each entry suffix The name of the entry at the top of the directory tree below which data is stored Multiple suffixes are possible within the same directory Each da...

Page 91: ...blic key based protocol topology The way a directory tree is divided among physical servers and how these servers link with one another Transport Layer Security See TLS uid A unique number associated with each user on a Unix system URL Uniform Resource Locator The addressing system used by the server and the client to request documents It is often called a location The format of a URL is protocol ...

Page 92: ...92 Netscape Directory Server Installation Guide May 2002 ...

Page 93: ...tor 15 configuration directory defined 16 conventions in this book 8 creating silent install files 43 custom install defined 19 D directory manager 15 directory server 12 directory suffix 16 directory tree configuring 56 dsktune utility 23 73 E express install defined 19 using 33 F fonts in this book 8 G glossary of terms 77 91 H help launching 55 I install inf 43 installation components 11 config...

Page 94: ... 13 troubleshooting 75 preparing for installation 11 prerequisites migration 60 R removing the directory server 69 replicated site migration 65 requirements computer system 21 root DN directory manager 15 running server users and groups 14 S schema migrating 61 server root 13 setup program using from command line 42 silent install creating install files 43 directives 47 admin 52 base 49 slapd 50 s...

Page 95: ...Index 95 U uninstalling the directory server 69 upgrading prerequisites for 60 upgrading schema 61 upgrading the directory server 59 user and groups to run servers as 14 user directory defined 17 ...

Page 96: ...96 Netscape Directory Server Installation Guide May 2002 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands