Glossary - Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR WINDOWS Manual

Glossary

Access Token
When a user is authenticated, the Local Security Authority (LSA) creates an access token,
which in this case is a primary access token for that user. An access token contains a
security identifier (SID) for the user, SIDs for the groups to which the user belongs, and the
user's privileges. In Domain Services for Windows (DSfW), a user's SID and group
membership are stored in eDirectory .
TM
When the user logs in to a Windows workstation in a DSfW domain, the Workstation
receives this security information from the DSfW domain controller and associates it with
the user's login session.
ADPH
Active Directory Provisioning Handler.
Responsible for automatically provisioning all the eDirectory objects in a domain with
appropriate Active Directory attributes.
Child Domain
Also known as a subdomain. A child domain is a part of a larger domain name in the DNS
hierarchy, which has the root-level domain at the top, followed by second-level domains,
then followed by subdomains.
Configuration Partition
Stores the entire eDirectory forest configuration information, which consists of the cross-
references and other forest-related information. The data stored in this partition is common
to all domains in the eDirectory forest. Each type of configuration information is stored in a
container in the configuration partition.
Cross-forest Trust
A feature that enables trust to be automatically managed among multiple DSfW forests or
between a DSfW forest and an Active Directory forest. It helps to consolidate operations
that result from mergers and acquisitions and enables the users in one forest to seamlessly
access services in the other forest.
Cross-forest trusts are transitive. For example, every domain in Forest M has an implicit
trust relationship with every domain in Forest N. However, transitivity does not mean that if
you have a cross-forest trust between Forest M and Forest N, and a second cross-forest
trust between Forest N and Forest O, a trust relationship exists between Forest M and
Forest O. You are required to create a second cross-forest trust between Forest M and
Forest O. Cross-forest trusts can be either one-way or two-way, and you need to establish
the trust relationship between the forest root domains in each forest.
Cross-Reference Objects
Objects present in the configuration partition of the forest. Each cross-reference object
represents a domain partition. They are used by domain controllers to generate referrals to
other eDirectory partitions in the forest and to external directories when the object is not
local.
Glossary 235