Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR WINDOWS Manual page 18

Function
Schema Addition
Search
Multiple Instances
Support for NT ACLs
Domain Partition
For both DSfW server and LDAP server, login authorization and auditing is performed by using
NMAS . Data on the wire is encrypted as mandated by the workstations. All keys, including
TM
Kerberos and NTLM, are encrypted by using a per attribute NICI key.
18 OES 2 SP2: Domain Services for Windows Administration Guide
DSfW LDAP Server
Attribute and class mappings are
changed for some object classes.
For example, User and Group
object classes are mapped to
user and group; server is mapped
to ndsServer User and Group
object classes are extended to
hold additional Active Directory
attributes. For more information,
Attribute Mappings and Class
Mappings.
Search and Modify, to a DSfW
server on port 389 or 636 return
only those objects that exist in the
partition and do not search
beyond the partition boundary. An
LDAP referral is returned, but if
the calling LDAP application does
not support referrals, it fails to
search beyond the partition
boundary. A search request on
global catalog ports (3268, 3269)
spans partition boundaries and
searches the entire forest. The
result set contains only the
attributes marked as Partial
Attribute Set (PAS).
Not supported.
No support for NT ACLs.
Every DSfW server has a unique
domain partition (required by the
Active Directory security model).
eDirectory Server
The search spans across
partitions.
Supported.
Directory objects are protected by
proven eDirectory ACLs.
No concept of domain partition.