LDAP Implementation Cookbook

Book description

The implementation and exploitation of centralized, corporate-wide directories are among the top priority projects in most organizations in the years 1999 and 2000. The need for a centralized directory emerges as organizations realize the overhead and cost involved in managing the many distributed micro and macro directories introduced in the past decade with decentralized client/server applications and network operating systems.

Directories are key for a successful IT operation in medium and large environments. IBM understands this requirement and supports it by providing directory implementations based on industry standards at no additional cost on all its major platforms and even important non-IBM platforms. The IBM SecureWay Directory, formerly known as the IBM eNetwork LDAP Directory, implements the Lightweight Directory Access Protocol (LDAP) standard that has emerged quickly in the past years as a result of the demand for such a standard.

This redbook will help you understand, install, and configure the IBM SecureWay Directory . It is targeted at system specialists who need to know the concepts and the detailed instructions for a successful LDAP implementation.

Table of contents

  1. Copyright
  2. Figures
  3. Tables
  4. Preface
  5. Introduction
    1. What Is a Directory?
    2. The Directory as Infrastructure
    3. LDAP: Protocol or Directory?
    4. The LDAP Road Map
    5. The Framework for Creating Enterprise-Wide Solutions
    6. IBM Directory Strategy
    7. IBM Directory Offerings
    8. LDAP Standards
    9. Summary
  6. Schema and Namespace
    1. LDAP Information Model Overview
    2. LDAP Names
    3. Directory Information Tree (Namespace) Structure
    4. Relationship Between Objects
    5. The IBM Schema
    6. Schema Categories
    7. The IBM Schema Repository
  7. A Step-by-Step Approach for Directory Implementation
    1. Define the Objective for Using an LDAP Directory Service
    2. Define the Data to Store in the Directory Service
    3. Evaluate Data and Its Relationship to Directory Schema
    4. Define and Assign Responsibilities for the Data
    5. Evaluate Data and Its Placement in the Namespace
    6. Evaluate the Existing Security Policy
    7. Define the Migration Model
    8. Define the LDAP Programming Model
    9. Define the Deployment and Performance Criteria
    10. Step-by-Step Summary
  8. Managing an LDAP Directory
    1. Overview: Administration Tools, Utilities, and APIs
    2. Centralized versus Distributed Administration
    3. UTF-8 Support
    4. Tivoli TME Considerations
    5. Distributed Directories - Split Namespaces
    6. Migration from the Previous Release
    7. Migration from Non-LDAP Sources
    8. Summary and Conclusions
  9. Directory Security
    1. Security of the Directory
    2. Security Support of the IBM SecureWay Directory
    3. SSL Utilities
    4. Configuring SSL Security
    5. Delegation Model
    6. Access Control
    7. Storing Security Related Information in the Directory
  10. Installation and Configuration
    1. Windows NT
    2. AIX
    3. OS/390
    4. OS/400
  11. LDAP Data and System Administration
    1. The Directory Management Tool
    2. The Administrator Graphical User Interface
    3. Database Configuration
    4. Defining a Suffix
    5. Database Population
    6. Replication
    7. Referrals
    8. Command Line Utilities
    9. Security Setup
    10. Schema Data Management
    11. Locating LDAP Servers Using DNS
  12. Developing Directory-Enabled Applications
    1. Java Naming and Directory Interface (JNDI)
    2. C LDAP Application Programming Interface (API)
    3. Special Programming Topics
  13. Standards
  14. Special Notices
  15. Other References and Related Publications
    1. International Technical Support Organization Publications
    2. Redbooks on CD-ROMs
    3. Other Publications
    4. The Internet Engineering Task Force (IETF)
    5. The University of Michigan (UMICH)
    6. IBM Internet Wet Site for the IBM SecureWay Directory
    7. IBM Intranet Web Site
    8. Lotus Notes Discussion Database
    9. Software Development Kits
    10. Other Sources
  16. How to Get ITSO Redbooks
    1. IBM Redbook Fax Order Form
  17. List of Abbreviations
  18. Index

Product information

  • Title: LDAP Implementation Cookbook
  • Author(s): Heinz Johner, Michel Melot, Harri Stranden, Permana Widhiasta
  • Release date: June 1999
  • Publisher(s): IBM Redbooks
  • ISBN: 0738413313