Purpose of This Guide
This guide provides you with a foundation for
planning your directory. The information provided here is intended for
directory decision makers, designers, and administrators.
The first chapter of this guide introduces
basic directory concepts. Most of the remainder of the guide covers
aspects of directory design, including schema design, the directory
tree, topology, replication, and security. The last chapter provides
sample deployment scenarios to help you plan simple deployments as well
as complex deployments designed to support millions of users
distributed worldwide.
Directory Server Overview
Directory Server provides the following key
features:
- Multi-master
replication -- Provides a
highly available directory service for both read and write operations.
Multi-master replication can be combined with simple and cascading
replication scenarios to provide a highly flexible and scalable
replication environment.
- Chaining and
referrals -- Increases the
power of your directory by storing a complete logical view of your
directory on a single server, while maintaining data on a large number
of Directory Servers transparently for clients.
- Roles and Class of
Service -- Provides a
flexible mechanism for grouping and sharing attributes between entries
in a dynamic fashion.
- Improved access
control mechanism --
Provides support for macros that dramatically reduce the number of
access control statements used in the directory and increase the
scalability of access control evaluation.
- Resource-limits by
bind DN -- Gives you
the power to control the amount of server resources allocated to search
operations based on the bind DN of the client.
- Multiple databases --
Provides a simple
way of breaking down your directory data to simplify the implementation
of replication and chaining in your directory service.
- Password Policy and
Account Lockout --
Allows you to define a set of rules that govern how passwords and user
accounts are managed in the Directory Server.
- SSL -- Provides
secure communications
over the network, including ciphers with up to 168-bit encryption.
The major components of Directory Server
include:
- An LDAP server -- The
core of the
directory service, provided by the ns-slapd
daemon and compliant with the LDAP v3 Internet standards.
- Directory Server
Console -- An improved
management console that dramatically reduces the effort of setting up
and maintaining your directory service. The directory console is part
of Netscape Console, the common management framework for Netscape
servers.
- SNMP Agent -- Permits
you to monitor your
Directory Server in real time using the Simple Network Management
Protocol (SNMP).
- Online backup and
restore -- Allows you
to create backups and restore from backups while the server is running.
Related Information
The document set for Directory Server also
contains the following guides:
For a list of documentation installed with
Directory Server, open this file:
serverRoot/manual/en/slapd/index.htm
For the latest
information about Directory
Server, including current release notes, complete product
documentation, technical notes, and deployment information, check this
site: