[Next] [Index]
This guide explains aspects of planning for and deployment of the Netscape Directory Server 3.0.
Last updated December 1997.
Contents
Introduction
- What Is in This Book?
- Conventions Used in This Book
Chapter 1 Welcome to the Directory Server
- About the Enterprise
- What Is a Directory Service?
- N+1 Directory Services
- Global Directory Services
- LDAP
- The Netscape Directory Server
- Client-Server Architecture
- Server-Side Architecture
- Directory Server Concepts
- The Directory Tree
- Distinguished Names
- Suffix
- Root Entry
- Root Distinguished Name
- Base Distinguished Name
- Secure Sockets Layer
Chapter 2 Directory Deployment Overview
- Directory Design Activities Overview
- Deployment Advice
Chapter 3 Planning Your Directory Data
- Data Planning Overview
- Introduction to Directory Data
- Examples of Directory Data
- What Your Directory Should Not Include
- Data Planning
- Performing the Site Survey
- Analyzing Your Site Survey
- Data Mastering
- Data Mastering for Replication
- Data Mastering Across Multiple Applications
- Data Ownership
- Determining Data Access
- Documenting Your Site Survey
- Directory Schema Design
Chapter 4 Planning Directory Schema
- Directory Data Representation Overview
- Object Classes
- Standard Object Classes
- Inheritance
- Attributes
- Required Versus Optional Attributes
- A Note About Attribute Values
- Schema Checking
- Customizing the Schema
- When You Should Extend Your Schema
- When to Add New Object Classes and Attributes
- Object Class Strategies
- A Consistent Schema
- Schema Extension Frequently Asked Questions
Chapter 5 Planning Security Policies
- Security Policy Overview
- Directory Access Rules
- User Authentication
- Certificate-Based Authentication
- Authenticating Using Directory Server for NT
- Anonymous Access
- Root DN Authentication
- Access-Control Lists
- Setting Permissions
- The Precedence Rule
- Allowing or Denying Access
- When to Explicitly Deny Access
- Where to Place Access-Control Rules
- Using Filtered Access-Control Rules
- The ACI Format
- Targets
- Permissions
- Bind Rules
- Using ACIs: Some Hints and Tricks
- Creating a Security Policy
- Planning Your Groups
- Group Usage Advice
- Determining General Directory Access
- Determining Points of Access
Chapter 6 Directory Tree Design
- Directory Tree Overview
- Multiple Suffixes
- Planning Your Directory Suffix(es)
- Selecting a Suffix
- Using Multiple Suffixes: ISPs
- Using Multiple Suffixes: Large Enterprises and Extranets
- Branching Your Directory Tree
- Branch Point Distinguished Name Attributes
- Branching Strategies
- Branching to Support Replication or Referrals
- Branching to Support Access-Control
- Branching to Support International Enterprises
- Naming Person Entries
- Naming Non-Person Entries
Chapter 7 Planning Replication
- Replication Overview
- Supplier Servers
- Consumer Servers
- Replicating Directory Trees
- Cascading Replicas
- Subtree Replication
- Multiple Subtree Replication
- Initiating Replication
- Directory Entries used to Support Replication
- Supplier-Initiated Replication
- Consumer-Initiated Replication
- Building a Highly Available Directory Service
- Using Replication for High Availability
- Using Replication for Load Balancing
- Load Balancing the Server
- Load Balancing the Network
- Using Replication for Local Availability
- Determining Your Replication Strategy
- Example: Load Balancing a Small Site
- Example: Load Balancing a Large Site
- Example: Load Balancing for Local Management
- Example: Load Balancing for Server Traffic
- Example: Replicating for Messaging
Chapter 8 Planning Referrals
- Referral Overview
- Smart Referrals
- Smart Referral Usages
- How You Should Use Smart Referrals
- LDAP Client Referral Handling
- Netscape Client Referral Handling
Chapter 9 Directory Design Examples
- A Small Organization
- A State Government
- An International Corporation
- Single Suffix, Global Directory Tree Replication
- Single Suffix, Local Data Management
- Multiple Suffixes, Local Data Management
- Enabling the Extranet
Chapter 10 Extending Your Directory Service
- Building Custom Tools for Data Migration
- Building Custom LDAP Clients
- The LDAP C and Java SDKs
- Writing Server Plug-Ins
Appendix A Quick Start
- A Word of Advice
- Planning Your Suffix Value
- Directory Tree Advice
- DN Advice
- Creating SuiteSpot Settings
- Creating Directory Entries
- For More Information
[Next] [Index]
Last Updated: 02/17/98 15:41:47
Copyright © 1997
Netscape Communications Corporation