Assigning Class Of Service; About Cos - Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual

Assigning Class of Service

Assigning Class of Service
A class of service (CoS) allows you to share attributes between entries in a way
that is transparent to applications. CoS simplifies entry management and reduces
storage requirements.
There are two methods for creating and managing CoS: with Directory Server
Console or through the command-line. The following sections describe CoS in
more detail and provide the procedures for managing CoS through both the
Console and the command-line:
•

About CoS

• Managing CoS Using the Console
• Managing CoS from the Command-Line
• Creating Role-Based Attributes
• Access Control and CoS
About CoS
Clients of the Directory Server read the attributes on a user's entry. With CoS,
some attribute values may not be stored with the entry itself. Instead, they are
generated by class of service logic as the entry is sent to the client application.
Each CoS is comprised of the following two types of entry in your directory:
• CoS Definition Entry — The CoS definition entry identifies the type of CoS
you are using. Like the role definition entry, it inherits from the
LDAPsubentry
which it is effective.
• Template Entry — The CoS template entry contains a list of the shared
attribute values. Changes to the template entry attribute values are
automatically applied to all the entries within the scope of the CoS. A single
CoS might have more than one template entry associated with it.
The CoS definition entry and template entry interact to provide attribute
information to their target entries, any entry within the scope of the CoS.
NOTE
182 Red Hat Directory Server Administrator's Guide • May 2005
object class. The CoS definition entry is below the branch at
LDAP search requests containing a filter that references an attribute
defined by a CoS may return unexpected results. Take care when
deciding which attributes to generate using a CoS.