Red Hat DIRECTORY SERVER 7.1, Installation Manual

Page: 10 / 96

4 Chapter 1. Preparing for a Directory Server Installation
Directory Manager DN and password.
The Directory Manager DN is the special directory entry to which access control does not apply.
Think of the directory manager as your directory’s superuser. (In former releases of Directory
Server, the Directory Manager DN was known as the root DN ).
The default Directory Manager DN is
cn=Directory Manager
. Because the Directory Man-
ager DN is a special entry, the Directory Manager DN does not have to conform to any suffix
configured for your Directory Server. Therefore, you must not manually create an actual Direc-
tory Server entry that has the same DN as the Directory Manager DN.
The Directory Manager password must be at least 8 characters long and is limited to ASCII
letters, digits, and symbols.
Configuration Directory Administrator ID and password.
The configuration directory administrator is the person responsible for managing all directory
services accessible through Red Hat Console. If you log in with this user ID, then you can ad-
minister any Directory Server that you can see in the server topology area of Red Hat Console.
For security, the configuration directory administrator should not be the same as Directory Man-
ager. The default configuration directory administrator ID is admin.
Administration Server user and password.
You are prompted for this only during custom installations. The Administration Server user is
the special user that has all privileges for the local Administration Server. Authentication as this
person allows you to administer all the servers stored in the local server root.
The Administration Server user ID and password are used only when the Directory Server is
down and you are unable to log in as the configuration directory administrator. The existence
of this user ID means that you can access Administration Server and perform disaster recovery
activities such as starting Directory Server, reading log files, and so forth. Normally, Adminis-
tration Server user and password should be identical to the configuration directory administrator
ID and password.
1.2.5. Determining Your Directory Suffix
A directory suffix is the directory entry that represents the first entry in a directory tree. You will need
at least one directory suffix for the tree that will contain your enterprise’s data. It is common practice to
select a directory suffix that corresponds to the DNS host name used by your enterprise. For example,
if your organization uses the DNS name example.com, then select a suffix of
dc=example,dc=com
.
For more information on planning the suffixes for your directory service, see the Red Hat Directory
Server Deployment Guide .
1.2.6. Determining the Location of the Configuration Directory
The directory instance that stores the configuration information, such as port numbers, is called the
configuration directory. The configuration information is stored in the
o=NetscapeRoot
tree, which
is used by other Directory Server instances. A single instance of Directory Server can be both the
configuration directory and the user directory, but it is recommended that you have a separate instance
specifically for this configuration directory. The configuration directory can run on the same computer
that hosts the user directory, but, for best performance, it should be located on a separate machine.
If you are installing Directory Server only to support other server applications, then that Directory
Server is your configuration directory. If you are installing Directory Server to use as part of a general
directory service, then you will have multiple Directory Servers installed in your enterprise, and you