Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Manuals

Manuals and User Guides for Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR. We have 1 Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR manual available for free PDF download: Administrator's Manual

Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual (652 pages)

Brand: Red Hat | Category: Server | Size: 4 MB

Table of Contents
3
Directory Server Overview
27
Introduction to this Reference Guide
27
Prerequisite Reading
28
Conventions Used in this Book
29
Related Information
30
Part 1 Administering Red hat Directory Server
31
Chapter 1 Introduction to Red hat Directory Server

33
Chapter 2 Creating Directory Entries

45
Chapter 3 Configuring Directory Databases

79
Chapter 4 Populating Directory Databases

149
- Importing Data
  149
- Exporting Data
  156
Chapter 5 Advanced Entry Management

167
- Using Groups
  167
  - Managing Static Groups
    168
    
    Adding a New Static Group
    168
    
    Modifying a Static Group
    169
  - Managing Dynamic Groups
    169
    
    Adding a New Dynamic Group
    169
    
    Modifying a Dynamic Group
    170
- Using Roles
  170
  - About Roles
    171
  - Managing Roles Using the Console
    172
    
    Creating a Managed Role
    173
    
    Creating a Filtered Role
    174
    
    Creating a Nested Role
    174
    
    Viewing and Editing an Entry's Roles
    175
    
    Modifying a Role Entry
    176
    
    Making a Role Inactive
    176
    
    Reactivating a Role
    176
    
    Deleting a Role
    177
  - Managing Roles Using the Command-Line
    177
    
    Examples: Managed Role Definition
    178
    
    Table 5-1 Object Classes and Attributes for Roles
    178
    
    Example: Filtered Role Definition
    179
    
    Example: Nested Role Definition
    180
  - Using Roles Securely
    180
- Assigning Class of Service
  182
  - About Cos
    182
    
    About the Cos Definition Entry
    183
  - About the Cos Template Entry
    183
  - How a Pointer Cos Works
    184
  - How an Indirect Cos Works
    184
  - How a Classic Cos Works
    185
- Managing Cos Using the Console
  186
  - Creating a New Cos
    186
  - Creating the Cos Template Entry
    188
  - Editing an Existing Cos
    190
  - Deleting a Cos
    190
- Managing Cos from the Command-Line
  190
- Creating Role-Based Attributes
  198
- Access Control and Cos
  199
Chapter 6 Managing Access Control

201
- Access Control Principles
  202
  - ACI Structure
    202
  - ACI Placement
    203
  - ACI Evaluation
    203
  - ACI Limitations
    204
- Default Acis
  205
- Creating Acis Manually
  206
  - The ACI Syntax
    206
    
    Example ACI
    207
  - Defining Targets
    207
    
    Table 6-1 LDIF Target Keywords
    208
    
    Targeting a Directory Entry
    209
    
    Targeting Attributes
    211
    
    Targeting both an Entry and Attributes
    212
    
    Targeting Entries or Attributes Using LDAP Filters
    212
    
    Targeting Attribute Values Using LDAP Filters
    213
    
    Targeting a Single Directory Entry
    214
  - Defining Permissions
    215
    
    Allowing or Denying Access
    215
    
    Assigning Rights
    215
    
    Rights Required for LDAP Operations
    217
    
    Permissions Syntax
    218
    
    Access Control and the Modrdn Operation
    219
- Bind Rules
  219
  - Bind Rule Syntax
    220
    
    Table 6-2 LDIF Bind Rule Keywords
    220
    
    Defining User Access - Userdn Keyword
    221
    
    Anonymous Access (Anyone Keyword)
    222
    
    General Access (All Keyword)
    222
    
    Self Access (Self Keyword)
    222
    
    Parent Access (Parent Keyword)
    222
    
    LDAP Urls
    222
    
    Wildcards
    223
    
    Examples
    223
    
    Defining Group Access - Groupdn Keyword
    225
    
    Examples
    225
    
    Defining Access Based on Value Matching
    226
    
    Using the Userattr Keyword
    227
    
    Using the Userattr Keyword with Inheritance
    230
    
    Granting Add Permission Using the Userattr Keyword
    231
    
    Figure 6-1 Using Inheritance with the Userattr Keyword
    231
    
    Defining Role Access - Roledn Keyword
    226
    
    Defining Access from a Specific IP Address
    232
    
    Defining Access from a Specific Domain
    233
    
    Defining Access at a Specific Time of Day or Day of Week
    234
    
    Examples
    234
    
    Defining Access Based on Authentication Method
    235
    
    Examples
    236
    
    Using Boolean Bind Rules
    236
  - Creating Acis from the Console
    237
    
    Displaying the Access Control Editor
    238
    
    Figure 6-2 Selecting an Object in the Navigation Tree to Set Access Control
    239
    
    Figure 6-3 Access Control Editor Window
    239
    
    Viewing Current Acis
    240
    
    Creating a New ACI
    240
    
    Editing an ACI
    241
    
    Deleting an ACI
    242
  - Access Control Usage Examples
    242
    
    Granting Anonymous Access
    244
    
    ACI "Anonymous Example.com
    244
    
    ACI "Anonymous World
    245
    
    Granting Write Access to Personal Entries
    246
    
    ACI "Write Example.com
    246
    
    ACI "Write Subscribers
    247
    
    Restricting Access to Key Roles
    249
    
    ACI "Roles
    249
    
    Granting a Group Full Access to a Suffix
    251
    
    Aci "Hr
    251
    
    Granting Rights to Add and Delete Group Entries
    252
    
    ACI "Create Group
    253
    
    ACI "Delete Group
    254
    
    Granting Conditional Access to a Group or Role
    255
    
    ACI "Hostedcompany1
    255
  - Denying Access
    257
  - ACI "Billing Info Read
    257
  - ACI "Billing Info Deny
    258
  - Setting a Target Using Filtering
    260
  - Allowing Users to Add or Remove Themselves from a Group
    260
  - ACI "Group Members
    260
  - Defining Permissions for Dns that Contain a Comma
    261
  - Proxied Authorization ACI Example
    262
- Viewing the Acis for an Entry
  263
  - Get Effective Rights Control
    263
    
    Using Get Effective Rights from the Command-Line
    265
    
    Table 6-3 Permissions that Can be Set on Entries
    265
    
    Table 6-4 Permissions that Can be Set on Attributes
    265
    
    Using Get Effective Rights from the Console
    268
    
    Get Effective Rights Return Codes
    269
- Advanced Access Control: Using Macro Acis
  269
  - Table 6-5 Returned Result Codes
    269
  - Macro ACI Example
    270
  - Figure 6-4 Example Directory Tree for Macro Acis
    271
  - Macro ACI Syntax
    272
    
    Macro Matching for ($Dn)
    273
    
    Table 6-6 Macros in ACI Keywords
    273
    
    Macro Matching for [$Dn]
    274
    
    Macro Matching for ($Attr.attrname)
    275
- Access Control and Replication
  276
- Logging Access Control Information
  276
- Compatibility with Earlier Releases
  277
Chapter 7 User Account Management

279
- Managing the Password Policy
  279
- Inactivating Users and Roles
  296
Chapter 8 Managing Replication

301
Chapter 9 Extending the Directory Schema

375
- Overview of Extending Schema
  375
- Managing Attributes
  376
  - Viewing Attributes
    376
    
    Table 9-1 Attributes Tab Reference
    376
    
    Creating Attributes
    377
    
    Editing Attributes
    378
    
    Deleting Attributes
    379
  - Managing Object Classes
    379
    
    Viewing Object Classes
    380
    
    Table 9-2 Object Classes Tab Reference
    380
    
    Creating Object Classes
    381
    
    Editing Object Classes
    382
    
    Deleting Object Classes
    383
  - Turning Schema Checking on and off
    383
Chapter 10 Managing Indexes

385
- About Indexes
  385
  - About Indexes and Indexing Performance
    386
    
    Index Types
    388
  - About Default, System, and Standard Indexes
    390
    
    Overview of Default Indexes
    390
    
    Table 10-1 Default Indexes
    390
    
    Overview of System Indexes
    391
    
    Overview of Standard Indexes
    391
    
    Table 10-2 System Indexes
    391
  - Overview of the Searching Algorithm
    392
    
    Idlistscanlimit
    393
    
    Phonetic Searches
    394
  - Balancing the Benefits of Indexing
    395
- Creating Indexes
  397
- Deleting Indexes
  407
- Attribute Name Quick Reference Table
  415
Chapter 11 Managing SSL and SASL

417
- Introduction to SSL in the Directory Server
  418
  - Enabling SSL: Summary of Steps
    418
- Command-Line Functions for Start TLS
  419
  - Troubleshooting Start TLS
    419
- Obtaining and Installing Server Certificates
  420
- Using Certutil
  425
- Starting the Server with SSL Enabled
  428
- Setting Security Preferences
  433
- Using Certificate-Based Authentication
  435
  - Setting up Certificate-Based Authentication
    436
  - Allowing/Requiring Client Authentication
    437
- Configuring LDAP Clients to Use SSL
  437
- Introduction to SASL
  439
  - Authentication Mechanisms
    440
  - SASL Identity Mapping
    441
    
    Legacy Identity Mapping
    442
  - Configuring SASL Identity Mapping from the Console
    442
  - Configuring SASL Identity Mapping from the Command-Line
    443
  - Configuring Kerberos
    443
    
    Table 11-1 Supported Kerberos Systems
    443
    
    Configuring the KDC Server
    444
    
    Realms
    444
    
    Example
    445
Chapter 12 Monitoring Server and Database Activity

447
- Viewing and Configuring Log Files
  447
Chapter 13 Monitoring Directory Server Using SNMP

469
- About SNMP
  470
- Configuring the Master Agent
  470
- Configuring the Subagent
  471
  - Subagent Configuration File
    471
    
    Agentx-Master
    471
    
    Agent-Logdir
    471
    
    Server
    472
  - Starting the Subagent
    472
  - Testing the Subagent
    472
- Configuring the Directory Server for SNMP
  473
- Using the Management Information Base
  473
Chapter 14 Tuning Directory Server Performance

479
Chapter 15 Administering Directory Server Plug-Ins

489
- Server Plug-In Functionality Reference
  489
- Enabling and Disabling Plug-Ins from the Server Console
  512
Chapter 16 Using the Pass-Through Authentication Plug-In

513
Chapter 17 Using the Attribute Uniqueness Plug-In

529
Chapter 18 Windows Sync

543
Appendix A LDAP Data Interchange Format

573
- LDIF File Format
  573
  - Continuing Lines in LDIF
    575
  - Representing Binary Data
    575
- Specifying Directory Entries Using LDIF
  577
- Defining Directories Using LDIF
  581
  - LDIF File Example
    583
- Storing Information in Multiple Languages
  584
Appendix B Finding Directory Entries

587
- Finding Entries Using the Server Console
  587
- Using Ldapsearch
  588
  - Using Special Characters
    588
  - Ldapsearch Command-Line Format
    589
  - Commonly Used Ldapsearch Options
    589
  - Ldapsearch Examples
    592
    
    Returning All Entries
    592
    
    Specifying Search Filters on the Command-Line
    592
    
    Searching the Root DSE Entry
    592
    
    Searching the Schema Entry
    593
    
    Using LDAP_BASEDN
    593
    
    Displaying Subsets of Attributes
    593
    
    Specifying Search Filters Using a File
    594
    
    Specifying Dns that Contain Commas in Search Filters
    594
    
    Using Client Authentication When Searching
    594
- LDAP Search Filters
  595
  - Search Filter Syntax
    595
    
    Using Attributes in Search Filters
    596
    
    Using Operators in Search Filters
    596
    
    Table B-1 Search Filter Operators
    596
    
    Using Compound Search Filters
    597
    
    Table B-2 Search Filter Boolean Operators
    597
    
    Search Filter Examples
    598
- Searching an Internationalized Directory
  599
  - Matching Rule Filter Syntax
    599
    
    Matching Rule Formats
    600
    
    Using Wildcards in Matching Rule Filters
    602
  - Supported Search Types
    602
  - International Search Examples
    603
    
    Less-Than Example
    603
    
    Table B-3 Search Types, Operators, and Suffixes
    603
    
    Less-Than or Equal-To Example
    604
    
    Equality Example
    604
    
    Greater-Than or Equal-To Example
    604
    
    Greater-Than Example
    605
    
    Substring Example
    605
Appendix C LDAP Urls

607
- Components of an LDAP URL
  607
- Table C-1 LDAP URL Components
  607
- Escaping Unsafe Characters
  609
- Examples of LDAP Urls
  609
Appendix D Internationalization

613
- About Locales
  613
- Identifying Supported Locales
  614
- Supported Language Subtypes
  616
- Table D-2 Supported Language Subtypes
  617
- Troubleshooting Matching Rules
  618

Red Hat Categories

Software Server

Desktop

Storage

More Red Hat Manuals

Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Manuals

Red Hat DIRECTORY SERVER 7.1 - ADMINISTRATOR Administrator's Manual (652 pages)

Table of Contents

Chapter 1 Introduction to Red hat Directory Server

Chapter 2 Creating Directory Entries

Chapter 3 Configuring Directory Databases

Chapter 4 Populating Directory Databases

Chapter 5 Advanced Entry Management

Chapter 6 Managing Access Control

Chapter 7 User Account Management

Chapter 8 Managing Replication

Chapter 9 Extending the Directory Schema

Chapter 10 Managing Indexes

Chapter 11 Managing SSL and SASL

Chapter 12 Monitoring Server and Database Activity

Chapter 13 Monitoring Directory Server Using SNMP

Chapter 14 Tuning Directory Server Performance

Chapter 15 Administering Directory Server Plug-Ins

Chapter 16 Using the Pass-Through Authentication Plug-In

Chapter 17 Using the Attribute Uniqueness Plug-In

Chapter 18 Windows Sync

Appendix A LDAP Data Interchange Format

Appendix B Finding Directory Entries

Appendix C LDAP Urls

Appendix D Internationalization

Related Products

Red Hat Categories