Netscape NETSCAPE DIRECTORY SERVER 6.01 -... Manual de servicio

Administrator’s Guide

Netscape Directory Server

Version6.01

January 2002

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by

Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed

by the license agreement for the Software and applicable copyright law.

Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is

prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without

notice.

THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE

LIABLE FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY

ERROR IN THIS DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS,

PROFITS, USE, OR DATA.

rights reserved.

Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and

other countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications

Corporation, which may be registered in other countries. Other product and brand names are the exclusive property of their

respective owners.

The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in full

compliance with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation

to the U.S. government is with restricted rights as described in the license agreement for that Software.

Contents

ListofFigures .................................................................15

ListofTables..................................................................17

Introduction ...................................................................21

DirectoryServerOverview .............................................................. 21

PrerequisiteReading ................................................................... 22

ConventionsUsedinThisBook .......................................................... 23

RelatedInformation .................................................................... 23

Part 1 AdministeringNetscapeDirectoryServer................................. 25

Chapter 1 IntroductiontoNetscapeDirectoryServer ...............................27

OverviewofDirectoryServerManagement................................................ 28

UsingtheDirectoryServerConsole....................................................... 28

CopyingEntryDNstotheClipboard................................................... 29

ConfiguringtheDirectoryManager ...................................................... 29

BindingtotheDirectoryFromNetscapeConsole ........................................... 30

StartingandStoppingtheDirectoryServer ................................................ 31

ConfiguringLDAPParameters........................................................... 33

StartingtheServerwithSSLEnabled ..................................................... 36

CloningaDirectoryServer .............................................................. 37

StartingtheServerinReferralMode ...................................................... 38

Chapter 2 CreatingDirectoryEntries.............................................41

ManagingEntriesFromtheDirectoryConsole ............................................. 41

ManagingEntriesFromtheCommandLine ............................................... 50

ProvidingInputFromtheCommandLine .............................................. 51

Adding and Modifying Entries Using ldapmodify . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

4 Netscape Directory Server Administrator’s Guide • January 2002

LDIFUpdateStatements ................................................................ 58

ANoteonRenamingEntries ....................................................... 62

AddingAttributestoExistingEntriesUsingLDIF ..................................... 63

DeletinganEntryUsingLDIF......................................................... 67

MaintainingReferentialIntegrity......................................................... 68

HowReferentialIntegrityWorks ...................................................... 68

UsingReferentialIntegritywithReplication............................................. 69

ConfiguringtheSupplierServer .................................................... 69

FromtheDirectoryServerConsole .................................................. 70

FromtheDirectoryServerConsole .................................................. 71

FromtheDirectoryServerConsole .................................................. 72

Chapter 3 Configuring Directory Databases . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

CreatingandMaintainingSuffixes........................................................ 73

CreatingSuffixes .................................................................... 74

MaintainingSuffixes ................................................................. 81

CreatingandMaintainingDatabases...................................................... 83

CreatingDatabases .................................................................. 84

MaintainingDirectoryDatabases ...................................................... 89

CreatingandMaintainingDatabaseLinks ................................................. 90

ConfiguringtheChainingPolicy ...................................................... 91

CreatingaNewDatabaseLink ........................................................ 96

ChainingUsingSSL................................................................. 107

MaintainingDatabaseLinks ......................................................... 108

DatabaseLinksandAccessControlEvaluation ......................................... 109

AdvancedFeature:TuningDatabaseLinkPerformance.................................. 110

DetectingErrorsDuringNormalProcessing ......................................... 113

ManagingThreadedOperations ................................................... 114

AdvancedFeature:ConfiguringCascadingChaining.................................... 115

OverviewofCascadingChaining .................................................. 115

SummaryofCascadingChainingConfigurationAttributes............................ 123

CascadingChainingConfigurationExample ........................................ 123

UsingReferrals ....................................................................... 130

SettingDefaultReferrals............................................................. 130

CreatingSmartReferrals ............................................................ 131

CreatingSuffixReferrals ............................................................ 134

Chapter 4 PopulatingDirectoryDatabases...................................... 137

ImportingData ....................................................................... 137

ImportingFromtheCommandLine .................................................. 141

ExportingData ....................................................................... 144

BackingUpandRestoringData ......................................................... 148

BackingUpAllDatabases ........................................................... 148

BackingUpthedse.ldifConfigurationFile ............................................. 151

RestoringAllDatabases ............................................................. 151

RestoringDatabasesthatIncludeReplicatedEntries..................................... 154

Restoringthedse.ldifConfigurationFile............................................... 155

EnablingandDisablingRead-OnlyMode ................................................ 155

Chapter 5 AdvancedEntryManagement.........................................157

UsingGroups......................................................................... 157

ManagingStaticGroups............................................................. 158

ManagingDynamicGroups.......................................................... 159

UsingRoles .......................................................................... 160

AboutRoles ....................................................................... 160

ManagingRolesUsingtheConsole ................................................... 161

ManagingRolesUsingtheCommandLine............................................. 166

Examples:ManagedRoleDefinition................................................ 167

Example:FilteredRoleDefinition .................................................. 168

Example:NestedRoleDefinition................................................... 169

UsingRolesSecurely................................................................ 169

AssigningClassofService.............................................................. 170

AboutCoS......................................................................... 171

AbouttheCoSDefinitionEntry.................................................... 171

AbouttheCoSTemplateEntry .................................................... 172

HowaPointerCoSWorks ........................................................ 173

HowanIndirectCoSWorks....................................................... 173

HowaClassicCoSWorks......................................................... 174

ManagingCoSUsingtheConsole..................................................... 175

ManagingCoSFromtheCommandLine .............................................. 178

ExampleofaPointerCoS ......................................................... 182

ExampleofanIndirectCoS........................................................ 183

ExampleofaClassicCoS ......................................................... 184

CreatingRole-BasedAttributes....................................................... 185

AccessControlandCoS ............................................................. 186

Chapter 6 Managing Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

AccessControlPrinciples .............................................................. 188

ACIStructure ...................................................................... 188

ACIPlacement ..................................................................... 189

ACIEvaluation..................................................................... 189

ACILimitations .................................................................... 190

DefaultACIs ......................................................................... 191

6 Netscape Directory Server Administrator’s Guide • January 2002

CreatingACIsManually ............................................................... 192

TheACISyntax .................................................................... 192

ExampleACI.................................................................... 193

TargetingAttributes.............................................................. 196

RightsRequiredforLDAPOperations .............................................. 202

PermissionsSyntax .............................................................. 203

BindRules ........................................................................... 203

BindRuleSyntax ................................................................... 204

AnonymousAccess(anyoneKeyword) ............................................. 206

GeneralAccess(allKeyword) ..................................................... 206

SelfAccess(selfKeyword) ........................................................ 207

ParentAccess(parentKeyword) ................................................... 207

LDAPURLs..................................................................... 207

Wildcards....................................................................... 207

Examples ....................................................................... 207

Examples ....................................................................... 210

Examples ....................................................................... 218

Examples ....................................................................... 220

CreatingACIsFromtheConsole ........................................................ 222

AccessControlUsageExamples......................................................... 227

GrantingAnonymousAccess...................................................... 228

GrantingWriteAccesstoPersonalEntries........................................... 230

RestrictingAccesstoKeyRoles .................................................... 234

GrantingaGroupFullAccesstoaSuffix ............................................ 235

GrantingRightstoAddandDeleteGroupEntries.................................... 236

GrantingConditionalAccesstoaGrouporRole ..................................... 239

DenyingAccess.................................................................. 241

SettingaTargetUsingFiltering .................................................... 244

AllowingUserstoAddorRemoveThemselvesFromaGroup ......................... 244

DefiningPermissionsforDNsThatContainaComma................................... 245

ProxiedAuthorizationACIExample .................................................. 246

ViewingtheACIsforanEntry .......................................................... 247

AdvancedAccessControl:UsingMacroACIs............................................. 247

MacroACIExample ................................................................ 248

MacroACISyntax .................................................................. 250

MacroMatchingfor($dn)......................................................... 251

MacroMatchingfor[$dn]......................................................... 252

Macro Matching for ($attr.attrName)................................................ 253

AccessControlandReplication ......................................................... 254

LoggingAccessControlInformation..................................................... 254

CompatibilitywithEarlierReleases...................................................... 255

Chapter 7 UserAccountManagement...........................................257

ManagingthePasswordPolicy.......................................................... 257

ConfiguringthePasswordPolicy ..................................................... 258

ConfiguringthePasswordPolicyUsingtheConsole.................................. 258

ConfiguringthePasswordPolicyUsingtheCommand-Line ........................... 260

SettingUserPasswords ............................................................. 262

ConfiguringtheAccountLockoutPolicy .............................................. 263

ConfiguringtheAccountLockoutPolicyUsingtheConsole ........................... 263

ConfiguringtheAccountLockoutPolicyUsingtheCommandLine .................... 264

ManagingthePasswordPolicyinaReplicatedEnvironment ............................. 265

InactivatingUsersandRoles............................................................ 266

InactivatingUserandRolesUsingtheConsole ......................................... 267

InactivatingUserandRolesUsingtheCommandLine .................................. 267

ActivatingUserandRolesUsingtheConsole .......................................... 268

ActivatingUserandRolesUsingtheCommandLine.................................... 269

SettingResourceLimitsBasedontheBindDN ............................................ 269

SettingResourceLimitsUsingtheConsole............................................. 270

SettingResourceLimitsUsingtheCommandLine ...................................... 270

Chapter 8 Managing Replication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273

ReplicationOverview.................................................................. 274

Read-WriteReplica/Read-OnlyReplica ............................................... 274

Supplier/Consumer ................................................................ 274

ChangeLog........................................................................ 275

UnitofReplication.................................................................. 275

ReplicationIdentity................................................................. 276

ReplicationAgreement.............................................................. 277

Compatibility with Earlier Versions of Directory Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 277

ReplicationScenarios .................................................................. 278

Single-MasterReplication ........................................................... 278

Multi-MasterReplication ............................................................ 279

CascadingReplication............................................................... 281

SummaryofStepsforComplexReplicationConfigurations................................. 283

DetailedReplicationTasks ............................................................. 284

ConfiguringSingle-MasterReplication................................................... 290

ConfiguringMulti-MasterReplication ................................................... 294

ConfiguringCascadingReplication...................................................... 300

DeletingtheChangeLog ............................................................... 306

InitializingConsumers................................................................. 307

ForcingReplicationUpdates............................................................ 310

ReplicationoverSSL................................................................... 314

ReplicationwithEarlierReleases ........................................................ 316

UsingtheRetroChangeLogPlug-In..................................................... 318

8 Netscape Directory Server Administrator’s Guide • January 2002

MonitoringReplicationStatus .......................................................... 322

SolvingCommonReplicationConflicts................................................... 323

Chapter 9 ExtendingtheDirectorySchema ..................................... 329

OverviewofExtendingSchema ......................................................... 329

ManagingAttributes .................................................................. 330

ManagingObjectClasses............................................................... 333

TurningSchemaCheckingOnandOff ................................................... 337

Chapter 10 ManagingIndexes ................................................ 339

AboutIndexes ........................................................................ 339

AboutIndexTypes ................................................................. 340

AboutDefault,System,andStandardIndexes .......................................... 341

OverviewofDefaultIndexes ...................................................... 341

OverviewofSystemIndexes ...................................................... 342

OverviewofStandardIndexes..................................................... 343

OverviewoftheSearchingAlgorithm ................................................. 343

BalancingtheBenefitsofIndexing .................................................... 346

CreatingIndexes ...................................................................... 348

CreatingIndexesFromtheServerConsole ............................................. 348

CreatingIndexesFromtheCommandLine ............................................ 349

AddinganIndexEntry ........................................................... 350

Runningthedb2index.plScript .................................................... 352

CreatingBrowsingIndexesFromtheServerConsole .................................... 353

CreatingBrowsingIndexesfromtheCommandLine .................................... 354

AddingaBrowsingIndexEntry ................................................... 354

RunningthevlvindexScript....................................................... 356

DeletingIndexes ...................................................................... 357

DeletingIndexesFromtheServerConsole ............................................. 358

DeletingIndexesFromtheCommandLine............................................. 359

DeletinganIndexEntry .......................................................... 359

Runningthedb2index.plScript .................................................... 360

DeletingBrowsingIndexesFromtheServerConsole .................................... 361

DeletingBrowsingIndexesFromtheCommandLine.................................... 362

DeletingaBrowsingIndexEntry................................................... 362

RunningthevlvindexScript....................................................... 364

ManagingIndexes..................................................................... 365

BenefitsoftheAllIDsMechanism .................................................... 365

DrawbacksoftheAllIDsMechanism ................................................. 366

WhenAllIDsThresholdisTooLow................................................ 366

WhenAllIDsThresholdisTooHigh ............................................... 367

AllIDsThresholdTuningAdviceforSingle-EnterpriseDirectories ....................... 367

AllIDsThresholdTuningAdviceforServiceProvidersandExtranets ..................... 368

DefaultAllIDsThresholdValue...................................................... 369

SymptomsofanInappropriateAllIDsThresholdValue ................................. 369

ChangingtheAllIDsThresholdValue ................................................ 370

AttributeNameQuickReferenceTable................................................... 371

Chapter 11 ManagingSSL ....................................................373

IntroductiontoSSLintheDirectoryServer ............................................... 373

ObtainingandInstallingServerCertificates............................................... 375

ActivatingSSL........................................................................ 379

SettingSecurityPreferences ............................................................ 381

UsingCertificate-BasedAuthentication .................................................. 383

ConfiguringLDAPClientstoUseSSL ................................................... 384

Chapter 12 MonitoringServerandDatabaseActivity ..............................389

ViewingandConfiguringLogFiles...................................................... 389

AccessLog ........................................................................ 391

ErrorLog.......................................................................... 392

AuditLog ......................................................................... 394

ManualLogFileRotation .............................................................. 396

MonitoringServerActivity ............................................................. 396

ViewingtheServerPerformanceMonitor ........................................... 397

OverviewofServerPerformanceMonitorInformation................................ 397

GeneralInformation(Server) ...................................................... 397

ResourceSummary .............................................................. 398

CurrentResourceUsage .......................................................... 398

ConnectionStatus................................................................ 399

GlobalDatabaseCacheInformation ................................................ 400

MonitoringDatabaseActivity........................................................... 403

ViewingDatabasePerformanceMonitors ........................................... 403

OverviewofDatabasePerformanceMonitorInformation ............................. 403

GeneralInformation(Database).................................................... 404

SummaryInformationTable ...................................................... 404

DatabaseCacheInformationTable ................................................. 405

DatabaseFile-SpecificTable ....................................................... 406

MonitoringDatabaseLinkActivity ...................................................... 408

Chapter 13 MonitoringDirectoryServerUsingSNMP..............................411

AboutSNMP ......................................................................... 412

SNMPOverview ................................................................... 412

NMS-InitiatedCommunication .................................................... 413

ManagedDevice-InitiatedCommunication.......................................... 413

10 Netscape Directory Server Administrator’s Guide • January 2002

OverviewoftheDirectoryServerManagementInformationBase............................ 414

AbouttheOperationsTable.......................................................... 414

TheEntriesTable ................................................................... 416

SettingUpSNMP ..................................................................... 417

SettingUpSNMPonWindowsNT ................................................... 417

SettingUpSNMPonUNIX .......................................................... 417

ConfiguringtheAIXSNMPDaemon.................................................. 418

StartingandStoppingtheSNMPSubagentonUNIX....................................... 419

StartingandStoppingtheSNMPServiceonWindowsNT .................................. 419

ConfiguringSNMPfortheDirectoryServer .............................................. 420

Chapter 14 Tuning Directory Server Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 421

TuningServerPerformance............................................................. 421

TuningDatabasePerformance .......................................................... 422

OptimizingSearchPerformance ...................................................... 423

TuningTransactionLogging ......................................................... 425

ChangingtheLocationoftheDatabaseTransactionLog ................................. 426

ChangingtheDatabaseCheckpointInterval............................................ 426

DisablingDurableTransactions ...................................................... 427

SpecifyingTransactionBatching...................................................... 428

MiscellaneousTuningTips ............................................................. 428

Avoid Creating Entries Under the cn=config Entry in the dse.ldif File . . . . . . . . . . . . . . . . . . . . . 429

Part 2 Plug-InsReference ...................................................431

Chapter 15 Administering Directory Server Plug-Ins . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 433

ServerPlug-inFunctionalityReference ................................................... 433

7-bitCheckPlug-In............................................................... 433

ACLPlug-In .................................................................... 434

ACLPreoperationPlug-In ........................................................ 435

BinarySyntaxPlug-In ............................................................ 435

BooleanSyntaxPlug-In ........................................................... 436

CaseExactStringSyntaxPlug-In................................................... 436

CaseIgnoreStringSyntaxPlug-In.................................................. 437

ChainingDatabasePlug-In........................................................ 437

ClassofServicePlug-In........................................................... 438

CountryStringSyntaxPlug-In..................................................... 438

DistinguishedNameSyntaxPlug-In................................................ 439

GeneralizedTimeSyntaxPlug-In .................................................. 439

IntegerSyntaxPlug-In............................................................ 440

InternationalizationPlug-In ....................................................... 440

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Servidor de Netscape

Netscape

Netscape NETSCAPE DIRECTORY SERVER 7.0 Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.2 - GATEWAY... Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.0 - DEPLOYMENT Guía de referencia rápida

Netscape

Netscape NETSCAPE DIRECTORY SERVER 7.0 - DEPLOYMENT Guía de referencia rápida

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 Manual de servicio

Netscape

Netscape NETSCAPE ENTREPRISE SERVER 6.0 - INSTALLATION AND MIGRATION... Manual de usuario

Netscape

Netscape NETSCAPE ENTREPRISE SERVER 6.1 - 04-2002... Manual de servicio

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.01 - PLUG-IN Manual de usuario

Netscape

Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.1 - DEPLOYMENT Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.0 Manual de servicio

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Guía de referencia rápida

Netscape

Netscape NETSCAPE DIRECTORY SERVER 7.0 Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 -... Manual de servicio

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.2 - PLUG-IN Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.02 - PLUG-IN Manual de usuario

Netscape

Netscape NETSCAPE ENTREPRISE SERVER 6.1 - INSTALLATION AND MIGRATION... Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.2 -... Manual de servicio

Netscape

Netscape NETSCAPE DIRECTORY SERVER 7.0 - PLUG-IN Manual de usuario

Netscape

Netscape NETSCAPE DIRECTORY SERVER 6.01 - DEPLOYMENT Guía de referencia rápida

Netscape

Netscape NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO... Manual

Netscape

Netscape NETSCAPE ENTERPRISE SERVER 6.0 - NSAPI PROGRAMMER... Manual de usuario

Manuales populares de Servidor de otras marcas

HP AlphaServer ES47 Manual de usuario

Dell

Dell PowerEdge R410 Manual de usuario

PowerNAS

PowerNAS CMA Manual de usuario

Supero

Supero FatTwin F617R3-FT Manual de usuario

MSI

MSI P1-109N-L70 Manual de usuario

Dell

Dell PowerEdge XE9640 Manual

Dell

Dell PS4100 Instrucciones de montaje

EtroVISION

EtroVISION EV3151 Manual de usuario

NEC

NEC Express5800/T110j Manual de usuario

HP ProLiant Gen9 Manual de usuario

Compaq

Compaq ProLiant 3000 Manual

Dell

Dell PowerEdge 3YPMN Manual de usuario

iRobo

iRobo IPC2U Manual de usuario

Nortel

Nortel 1000 Con?guration guide Manual de usuario

Asus

Asus AP7500 Manual de operación y mantenimiento

Avid Technology

Avid Technology AirSpeed 5000 Manual de usuario

HP Integrity rx2600 Guía de instalación

Milestone

Milestone Husky IVO 350T Manual de usuario