Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 366 / 574

Configuring LDAP Services for Novell eDirectory 367
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
If the parent DN falls within a nonauthoritative area, an error affectsMultipleDSAs should be
returned.
• Extended
13.9.6 Discovering Support for Superior References
Support for superior referrals is available only in LDAP Services for eDirectory 8.7 and later. To
discover whether an eDirectory server supports this functionality, you can read the
supportedFeatures attribute on the root DSE. If the supportedFeatures attribute lists the OID
2.16.840.1.113719.1.27.99.1, these features are available. Additional discovery-related changes to
the root DSE object include the following:
• namingContexts
This attribute only lists the partition roots held on the local DSA that the server is authoritative
for. No nonauthoritative partition roots are listed.
• altServer
This attribute won't list other eDirectory servers that share only nonauthoritative partitions with
the local server.
• superiorReference
This attribute advertises the superior referral for the DSA. This value is administered by
updating the ldapReferral attribute on the LDAP Server or LDAP Group object.
13.10 Persistent Search: Configuring for
eDirectory Events
Novell eDirectory has an event service that enables applications to be notified of significant events
that occur within the Directory. Some of these events are general events that can pertain to any
Directory service. Other events are specific to eDirectory and its special features.
eDirectory events are exposed to applications through two different extensions to the LDAP
protocol:
• An implementation of the Persistent Search Control
The Persistent Search feature of Novell eDirectory is a search operation that keeps going after
the initial set of matching entries is returned. Persistent Search is an extension to the LDAP v3
search operation that moves the burden of checking for updates within a search result set from
the client to the server. The Persistent Search control allows the client to perform a normal
LDAP search operation (specifying the base DN, scope of search, search filter, and so on) and
then, rather than having the server return a SearchResultDone message at the end, the operation
maintains a connection so the client can be updated each time an entry in the result set changes.
This allows the client to maintain a cache of the entries it is interested in, or trigger some logic
whenever an update occurs.
The “Persistent Search” document on the Internet (http://www.ietf.org/proceedings/01mar/I-D/
ldapext-psearch-03.txt) describes this extension in further detail.
• Monitor Events (an extended LDAP operation that is specific to eDirectory)
Applications that use eDirectory event services can place a heavy computational load on the
directory. Various administrative parameters are available to help control how event services are