Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 380 / 634

380 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Description: Data held on the eDirectory server
Notice that entries are placed above OU=Sales, even though these entries are mastered by another
DSA. This placement is necessary to provide the proper DNs for the entries mastered by the
eDirectory server.
To create a nonauthoritative area:
1 Segregate the nonauthoritative data from the authoritative data.
Create a partition boundary at the top of the authoritative area. An eDirectory server considers
itself authoritative for all data that it holds unless otherwise specified.
2 Mark the root partition as nonauthoritative.
2a Add the authoritative attribute to the rootmost entry in the partition.
2b
Populate the authoritative attribute with a value of zero.
3 Draw a boundary at the bottom of the nonauthoritative area.
Create partition roots at the areas of the subtree that this server is to be authoritative for. For
example, in the figure above, a partition root exists at the OU=Sales entry. The new partitions
won't have the authoritative attribute set to zero. Therefore, the server will be authoritative for
the partitions.
4 Refresh the LDAP server.
The LDAP server caches the authoritative and nonauthoritative area boundaries whenever its
configuration is refreshed. If you don't manually refresh the server configuration, the server
will automatically refresh itself on a 30-minute background task.
Multiple partitions can be stacked in a chain of nonauthoritative areas. However, LDAP
Services for eDirectory 8.8 requires that all nonauthoritative partitions must be contiguous and
held in local replicas.