Skip to Content
Sun and Oracle
Channel Sun
How to Buy
Log In
日本語
ホーム
>
Sun Java System Directory Server Enterprise Edition 6.2
> Sun Java System Directory Server Enterprise Edition 6.2 Installation Guide
Sun Java System Directory Server Enterprise Edition 6.2 Installation Guide
この本のみを検索
検索のヘルプ
内に含ま
Sun Java System Directory Server Enterprise Edition 6.2
その他のドキュメント
タイトル
製品カテゴリ
サポート リソース
Sun のトレーニングコース
BigAdmin システム管理ポータル
Sun サポートセンター
Sun Solve
PDF 文書ファイルをダウンロードする (3396 KB)
Sun Java System Directory Server Enterprise Edition 6.2 Installation Guide
Index
Numbers and Symbols
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Book Information
Preface
Who Should Use This Book
Before You Read This Book
How This Book Is Organized
Directory Server Enterprise Edition Documentation Set
Related Reading
Redistributable Files
Default Paths and Command Locations
Default Paths
Command Locations
Typographic Conventions
Shell Prompts in Command Examples
Symbol Conventions
Documentation, Support, and Training
Searching Sun Product Documentation
Third-Party Web Site References
Sun Welcomes Your Comments
Installing Directory Service Control Center, Directory Proxy Server, Directory Server, and Directory Server Resource Kit
1. Before You Install
The Administration Framework and Installation
Comparison of Single System And Distributed Installation
Where You Install Directory Service Control Center
Where You Create Server Instances
Directory Server Enterprise Edition Software Distributions
Java Enterprise System Distribution
Native Patches
Zip Distribution
Comparison of Java Enterprise System Distribution and Zip Distribution
Installation in Solaris Zones
Installation Procedure Quick Reference
2. Installing Directory Server Enterprise Edition 6.2
Software Installation
To Install Directory Service Control Center From Native Packages
To Troubleshoot Directory Service Control Center Access
To Install Only Directory Server From Native Packages
To Install Only Directory Proxy Server From Native Packages
To Install Directory Server Enterprise Edition From Zip Distribution
Installing Directory Service Control Center From Zip Distribution
To Deploy the WAR File with Sun Java System Application Server
To Deploy WAR File with Tomcat
To Troubleshoot Problems Accessing Directory Service Control Center
Upgrading Shared Components
Upgrading Shared Components Using Java ES Installer
Upgrading Shared Components Using Patches
To Upgrade Directory Server Enterprise Edition Using Native Packages
Environment Variables
Server Instance Creation
To Create a Directory Server Instance With DSCC
To Create a Directory Server Instance From the Command Line
To Create a Directory Proxy Server Instance With DSCC
To Create a Directory Proxy Server Instance From the Command Line
Working With Sun Cryptographic Framework on Solaris 10 Systems
To Use Directory Server With Cryptographic Hardware on a Solaris 10 System
To Use Directory Proxy Server With Cryptographic Hardware on a Solaris 10 System
3. Uninstalling Directory Server Enterprise Edition 6.2
Server Instance Removal
To Delete a Directory Proxy Server Instance With DSCC
To Delete a Directory Proxy Server Instance From the Command Line
To Delete a Directory Server Instance With DSCC
To Delete a Directory Server Instance From the Command Line
Software Removal
To Remove Directory Service Control Center Software
To Remove Directory Server, or Directory Proxy Server Installed From Native Packages
To Remove Software Installed From the Zip Distribution
To Force Removal of Software Installed From the Zip Distribution
Directory Server Enterprise Edition 6.2 Downgrade Instructions
Downgrading Directory Server Enterprise Edition Using Native Packages
Downgrading Directory Server Enterprise Edition Using Zip Distribution
Installing Identity Synchronization for Windows
4. Understanding the Product
Product Features
System Components
Watchdog Process
Core
Configuration Directory
Console
Command-Line Utilities
System Manager
Central Logger
Connectors
Connector Subcomponents
Directory Server Plug-In
Windows NT Connector Subcomponents
Message Queue
System Components Distribution
Core
Directory Server Connector and Plug-in
Active Directory Connector
Windows NT Connector and Subcomponents
How Identity Synchronization for Windows Detects Changes in Directory Sources
How Directory Server Connectors Detect Changes
How Active Directory Connectors Detect Changes
How Windows NT Connectors Detect Changes
Propagating Password Updates
Using the Password Filter DLL to Obtain Clear-Text Passwords
Using On-Demand Password Synchronization to Obtain Clear-Text Passwords
Reliable Synchronization
Deployment Example: A Two-Machine Configuration
Physical Deployment
Component Distribution
5. Preparing for Installation
Installation Overview
Installing Core
Configuring the Product
Preparing the Directory Server
Installing Connectors and Configuring Directory Server Plug-In
Synchronizing Existing Users
Configuration Overview
Directories
Synchronization Settings
Object Classes
Attributes and Attribute Mapping
Attribute Types
Parameterized Attribute Default Values
Mapping Attributes
Synchronization User Lists
Synchronizing Passwords With Active Directory
Enforcing Password Policies
Directory Server Password Policies
Active Directory Password Policies
Creating Accounts Without Passwords
Directory Server
Active Directory
Example Password Policies
Directory Server Password Policies
Active Directory Password Policies
Error Messages
Configuring Windows for SSL Operation
Installation and Configuration Decisions
Core Installation
Core Configuration
Connector Installation and Configuring the Directory Server Plug-In
Using the Command-Line Utilities
Installation Checklists
6. Installing Core
Before You Begin
Starting the Installation Program
On Solaris SPARC
To Run Identity Synchronization for Windows on Solaris SPARC
On Solaris x86
To Prepare and Run Identity Synchronization for Windows on Solaris x86
On Windows
To Run Identity Synchronization for Windows on Windows
On Red Hat Linux
To Prepare and Run Identity Synchronization for Windows on Linux
Installing Core
To Install Identity Synchronization for Windows Core Components Using the Installation Wizard
7. Configuring Core Resources
Configuration Overview
Opening the Identity Synchronization for Windows Console
To Open Identity Synchronization for Windows Console
Creating Directory Sources
To Create Directory Sources
Creating a Sun Java System Directory Source
To Create a New Sun Java System Directory Source
Preparing Sun Directory Source
To Prepare your Directory Server Source
Creating an Active Directory Source
To Configure and Create Windows Active Directory Servers in a Network
Creating a Windows NT SAM Directory Source
To Deploy Identity Synchronization for Windows on Windows NT
Selecting and Mapping User Attributes
Selecting and Mapping Attributes
To Select and Map Attributes for Synchronization
Creating Parameterized Default Attribute Values
Changing the Schema Source
To Change the Default Schema Source
Propagating User Attributes Between Systems
Specifying How Object Creations Flow
To Specify How Object Creations Should Flow Between Directory Server and Active Directory Systems
Specifying New Creation Attributes
To Specify New Creation Attributes
Editing Existing Attributes
To Edit Creation Attributes Mapping or Values
Removing Attributes
To Remove Creation Attributes Mapping or Values
Specifying How Object Modifications Flow
Specifying Direction
Configuring and Synchronizing Object Activations and Inactivations
To Synchronize Object Activations/Inactivations:
Interoperating with Directory Server Tools
Modifying Directory Server’s NsAccountLock Attribute Directly
Using a Custom Method for Directory Server
To Configure Identity Synchronization for Windows to Detect and Synchronize Object States between Directory Server and Active Directory
Specifying Configuration Settings for Group Synchronization
To Synchronize Groups:
Configure Identity Synchronization for Windows to Detect and Synchronize Groups Related Changes between Directory Server and Active Directory
Configuring and Synchronizing Account Lockout and Unlockout
Prerequisites for Account Lockout
Using the Account Lockout Feature
Specifying How Deletions Flow
To Specify how Deleted Entries Flow Between Directory Server and Active Directory Systems
Creating Synchronization User Lists
To Identify and Link User Types Between Servers
Saving a Configuration
To Save your Current Configuration from the Console Panels
8. Installing Connectors
Before You Begin
Running the Installation Program
To Restart and Run the Installation Program
Installing Connectors
Installing the Directory Server Connector
To Install the Directory Server Connector
Configuring Identity Synchronization for Windows Plug-in when Chained Suffix exists
Installing an Active Directory Connector
To Install an Active Directory Connector
Installing the Windows NT Connector
To Install a Windows NT Connector and the NT subcomponents
9. Synchronizing Existing Users and User Groups
Post-Installation Steps Based on Existing User and Group Populations
Using idsync resync
Resynchronizing Users or Groups
Linking Users
idsync resync Options
Checking Results in the Central Log
Starting and Stopping Synchronization
To Start or Stop Synchronization
Resynchronized Users/Groups
Starting and Stopping Services
10. Removing the Software
Planning for Uninstallation
Uninstalling the Software
Uninstalling Connectors
To Uninstall the Connectors
To Uninstall Core
Uninstalling the Console Manually
From Solaris or Linux Systems
To Uninstall the Console from Solaris or Linux
From Windows Systems
To Uninstall the Console from a Windows Active Directory or NT system
11. Configuring Security
Security Overview
Specifying a Configuration Password
Using SSL
Requiring Trusted SSL Certificates
Generated 3DES Keys
SSL and 3DES Keys Protection Summary
Message Queue Access Controls
Directory Credentials
Persistent Storage Protection Summary
Hardening Your Security
Configuration Password
Creating Configuration Directory Credentials
To Create a New User Other Than admin
Message Queue Client Certificate Validation
To Validate the Message Queue Client Certificate
Message Queue Self-Signed SSL Certificate
Access to the Message Queue Broker
Configuration Directory Certificate Validation
Restricting Access to the Configuration Directory
Securing Replicated Configurations
Using idsync certinfo
Arguments
Usage
Enabling SSL in Directory Server
To Enable SSL in Directory Server
Retrieving the CA Certificate from the Directory Server Certificate Database
Retrieving the CA Certificate from the Directory Server (using dsadm command on Solaris platform)
Enabling SSL in the Active Directory Connector
Retrieving an Active Directory Certificate
Using Window’s Certutil
To Retrieve an Active Directory Certificate Using the certutil program
Using LDAP
To Retrieve an Active Directory Certificate using LDAP
Adding Active Directory Certificates to the Connector’s Certificate Database
To Add Active Directory Certificate to the Connector's Certificate Database
Adding Active Directory Certificates to Directory Server
To Add the Active Directory CA certificate to the Directory Server Certificate Database
Adding Directory Server Certificates to the Directory Server Connector
To Add the Directory Server Certificates to the Directory Server Connector
12. Understanding Audit and Error Files
Understanding the Logs
Log Types
Central Logs
Local Component Logs
Local Windows NT Subcomponent Logs
Directory Server Plug-in Logs
To Change the Verbosity Level of the Error Logs
Reading the Logs
Configuring Your Log Files
To Configure Logging for Your Deployment
Viewing Directory Source Status
To View the Status of your Directory Sources
Viewing Installation and Configuration Status
To View the Remaining Steps of the Installation and Configuration Process
Viewing Audit and Error Logs
To View Your Error Logs
Enabling Auditing on a Windows NT Machine
To Enable Audit Logging on Your Windows NT Machine
Identity Synchronization for Windows Appendixes
A. Using the Identity Synchronization for Windows Command Line Utilities
Common Features
Common Arguments to the Idsync Subcommands
Entering Passwords
Getting Help
Using the idsync command
Using certinfo
Using changepw
To Change the Configuration Password for Identity Synchronization for Windows:
Using importcnf
Using prepds
To run idsync prepds
Using printstat
Using resetconn
Using resync
Using groupsync
Using accountlockout
Using dspluginconfig
Using startsync
Using stopsync
Using the forcepwchg Migration Utility
To Execute the forcepwchg Command line Utility
B. Identity Synchronization for Windows LinkUsers XML Document Sample
Sample 1: linkusers-simple.cfg
Sample 2: linkusers.cfg
C. Running Identity Synchronization for Windows Services as Non-Root on Solaris
Running Services as a Non-root User
To Run services as a Non-root User
D. Defining and Configuring Synchronization User Lists for Identity Synchronization for Windows
Understanding Synchronization User List Definitions
Configuring Multiple Windows Domains
To Configure Multiple Windows Domains
E. Identity Synchronization for Windows Installation Notes for Replicated Environments
Configuring Replication
To Configure any Replication Topology
Configuring Replication Over SSL
To Configure Directory Servers Involved in Replication so that all Replication Operations Occur Over an SSL Connection
Configuring Identity Synchronization for Windows in an MMR Environment
To Configure Identity Synchronization for Windows in an MMR Environment
News Center
About Sun
Contact Sun
Terms of Use
Privacy
Copyright
1994-2009
Sun Microsystems, Inc.
PDF 文書ファイルをダウンロードする (3396 KB)