Introduction to Directory Services and LDAP p. 1 Directory Services Overview and History p. 3 What a Directory Is p. 5 What a Directory Can Do for

Transcription

1 Preface p. xxvii Acknowledgments p. xxxi About the Authors p. xxxiii Introduction to Directory Services and LDAP p. 1 Directory Services Overview and History p. 3 What a Directory Is p. 5 What a Directory Can Do for You p. 24 What a Directory Is Not p. 31 The History and Origins of LDAP p. 38 Further Reading p. 51 Looking Ahead p. 52 Introduction to LDAP p. 53 What Is LDAP? p. 53 The LDAP Models p. 60 LDIF p. 93 LDAP Server Software p. 100 LDAP Command-Line Utilities p. 101 LDAP APIs p. 115 LDAP and Internationalization p. 118 LDAP Overview Checklist p. 119 Further Reading p. 120 Looking Ahead p. 122 LDAPv3 Extensions p. 123 How LDAPv3 Is Extended p. 123 The Root DSE and Extension Discovery p. 125 Selected LDAPv3 Extensions p. 127 Future Directions: Where Is LDAP Headed Next? p. 141 LDAP Extensions and Future Directions Checklists p. 145 Further Reading p. 145 Looking Ahead p. 146 Overview of Netscape Directory Server p. 147 Basic Installation p. 148 A Brief Hands-on Tour of Netscape Directory Server p. 155 Product Focus and Feature Set p. 176 Extending the Netscape Server: A Simple Plug-in Example p. 180 Further Reading p. 198 Looking Ahead p. 198 Designing Your Directory Service p. 199 Directory Design Road Map p. 201 The Directory Life Cycle p. 201 Directory Design Checklist p. 207

2 Further Reading p. 207 Looking Ahead p. 208 Defining Your Directory Needs p. 209 Overview of the Directory Needs Definition Process p. 210 Analyzing Your Environment p. 212 Determining and Prioritizing Application Needs p. 216 Determining and Prioritizing Users' Needs and Expectations p. 220 Determining and Prioritizing Deployment Constraints p. 223 Determining and Prioritizing Other Environmental Constraints p. 226 Choosing an Overall Directory Design and Deployment Approach p. 229 Setting Some Goals and Milestones p. 230 Defining Your Directory Needs Checklist p. 233 Further Reading p. 233 Looking Ahead p. 234 Data Design p. 235 Data Design Overview p. 236 Common Data-Related Problems p. 237 Creating a Data Policy Statement p. 239 Identifying Which Data Elements You Need p. 240 General Characteristics of Data Elements p. 243 Sources of Data p. 251 Maintaining Good Relationships with Other Data Sources p. 255 Data Design Checklist p. 257 Further Reading p. 258 Looking Ahead p. 258 Schema Design p. 259 The Purpose of a Schema p. 260 Elements of LDAP Schemas p. 261 Directory Schema Formats p. 273 The Schema-Checking Process p. 283 Schema Design Overview p. 285 Sources of Predefined Schemas p. 287 Defining New Schema Elements p. 291 Documenting and Publishing Your Schemas p. 299 Schema Maintenance and Evolution p. 300 Schema Design Checklist p. 301 Further Reading p. 302 Looking Ahead p. 303 Namespace Design p. 305 The Structure of a Namespace p. 306 The Purposes of a Namespace p. 309

3 Analyzing Your Namespace Needs p. 313 Examples of Namespaces p. 325 Namespace Design Checklist p. 328 Further Reading p. 328 Looking Ahead p. 329 Topology Design p. 331 Directory Topology Overview p. 332 Gluing the Directory Together: Knowledge References p. 336 Authentication in a Distributed Directory p. 348 Advantages and Disadvantages of Partitioning p. 351 Designing Your Directory Server Topology p. 354 Topology Design Checklist p. 369 Further Reading p. 370 Looking Ahead p. 370 Replication Design p. 371 Why Replicate? p. 372 Replication Concepts p. 372 Advanced Replication Features p. 392 Designing Your Directory Replication System p. 396 Replication Design Checklist p. 404 Further Reading p. 405 Looking Ahead p. 405 Privacy and Security Design p. 407 Security Guidelines p. 408 The Purpose of Security p. 409 Security Threats p. 411 Security Tools p. 416 Analyzing Your Security and Privacy Needs p. 420 Designing for Security p. 427 Privacy and Security Design Checklist p. 450 Further Reading p. 451 Looking Ahead p. 451 Deploying Your Directory Service p. 453 Evaluating Directory Products p. 455 Making the Right Product Choice p. 456 Categories of Directory Software p. 457 Evaluation Criteria for Directory Software p. 462 Reaching a Decision p. 475 Evaluating Directory Products Checklist p. 477 Further Reading p. 477 Looking Ahead p. 480

4 Piloting Your Directory Service p. 481 A Piloting Road Map p. 482 Piloting Your Directory Service Checklist p. 498 Looking Ahead p. 498 Analyzing and Reducing Costs p. 499 The Politics of Costs p. 500 Reducing Costs p. 501 Design, Piloting, and Deployment Costs p. 501 Ongoing Costs of Providing Your Directory Service p. 509 Analyzing and Reducing Costs Checklist p. 520 Further Reading p. 521 Looking Ahead p. 521 Putting Your Directory Service into Production p. 523 Creating a Plan for Putting Your Directory Service into Production p. 524 Advice for Putting Your Directory Service into Production p. 529 Executing Your Plan p. 533 Putting Your Directory Service into Production Checklist p. 534 Looking Ahead p. 534 Maintaining Your Directory Service p. 535 Backups and Disaster Recovery p. 537 Backup and Restore Procedures p. 538 Disaster Planning and Recovery p. 549 Directory-Specific Issues in Disaster Recovery p. 553 Backups and Disaster Recovery Checklist p. 554 Further Reading p. 555 Looking Ahead p. 556 Maintaining Data p. 557 The Importance of Data Maintenance p. 558 The Data Maintenance Policy p. 558 Handling New Data Sources p. 570 Handling Exceptions p. 571 Checking Data Quality p. 572 Maintaining Data Checklist p. 574 Further Reading p. 575 Looking Ahead p. 575 Monitoring p. 577 Introduction to Monitoring p. 578 Selecting and Developing Monitoring Tools p. 582 Notification Techniques p. 592 Taking Action p. 596 A Sample Directory Monitoring Utility p. 599

5 Performance Analysis p. 605 Monitoring Checklist p. 616 Further Reading p. 617 Looking Ahead p. 617 Troubleshooting p. 619 Discovering Problems p. 620 Types of Problems p. 621 Troubleshooting and Resolving Problems p. 632 Troubleshooting Checklist p. 639 Further Reading p. 640 Looking Ahead p. 640 Leveraging Your Directory Service p. 641 Developing New Applications p. 643 Reasons to Develop Directory-Enabled Applications p. 644 Common Ways That Applications Use Directories p. 649 Tools for Developing LDAP Applications p. 658 Advice for LDAP Application Developers p. 663 Setpwd, a Password-Resetting Utility p. 671 SimpleSite, a Web Site with User Profile Storage p. 687 Developing New Applications Checklist p. 722 Further Reading p. 723 Looking Ahead p. 724 Directory-Enabling Existing Applications p. 725 Reasons to Directory-Enable Existing Applications p. 726 Advice for Directory-Enabling Existing Applications p. 730 A Directory-Enabled finger Service p. 737 Adding LDAP Address Lookup to an Client p. 746 Directory-Enabling Existing Applications Checklist p. 756 Further Reading p. 757 Looking Ahead p. 757 Directory Coexistence p. 759 Why Is Coexistence Important? p. 761 Coexistence Techniques p. 763 Privacy and Security Considerations p. 774 Determining Your Coexistence Requirements p. 777 Directory Coexistence Implementation Considerations p. 780 Example: The ldapsync Tool: One-Way Synchronization with Join p. 783 Directory Coexistence Checklist p. 793 Further Reading p. 793 Looking Ahead p. 794 Case Studies p. 795

6 Case Study: Netscape Communications Corporation p. 797 Overview of the Organization p. 798 Directory Drivers p. 799 Directory Service Design p. 799 Directory Service Deployment p. 812 Directory Service Maintenance p. 815 Leveraging the Directory Service p. 818 Summary and Lessons Learned p. 821 Further Reading p. 822 Looking Ahead p. 822 Case Study: A Large Multinational Enterprise p. 823 Overview of the Organization p. 824 Directory Drivers p. 826 Directory Service Design p. 828 Directory Service Deployment p. 842 Directory Service Maintenance p. 846 Leveraging the Directory Service p. 849 Summary and Lessons Learned p. 852 Further Reading p. 853 Looking Ahead p. 853 Case Study: An Enterprise with an Extranet p. 855 Overview of the Organization p. 856 Directory Drivers p. 859 Directory Service Design p. 859 Directory Service Deployment p. 871 Directory Service Maintenance p. 874 Leveraging the Directory Service p. 876 Summary and Lessons Learned p. 877 Looking Ahead p. 878 Index p. 879 Table of Contents provided by Blackwell's Book Services and R.R. Bowker. Used with permission.