Fundamentals of edirectory

Size: px

Start display at page:

Download "Fundamentals of edirectory"

Ross Cummings
5 years ago
Views:

1 Warren E. Wyrostek, M.Ed., M.Div., MCNI, MCNE, CDE Fundamentals of edirectory Author: Novell NetWare 6.5 CNA Exam Cram2

2 Basics Fundamentals of edirectory Benefits Objectives Compatible Platforms 3 Threes Tree Design Utilities Object Naming (If Time!)

3 edirectory Basics Definition Purpose Most fundamental network service Historical Perspective Introduced in 1993 as NDS Prior to this the Bindery was used Roots in X.500=Set of Standards Specify the Design of a distributed directory service for managing information Excellent Reference

4 Graphical View of an edirectory Tree.CN=PUTZ.OU=SALES.OU=LOC2.O= XYZ.PUTZ.SALES.LOC2.XYZ IF CC=LOC1.XYZ THEN RDN FOR DAFFY= DAFFY.IS IF CC=IS.LOC1.XYZ, THEN ADMIN CAN LOGIN AS ADMIN..

5 edirectory-sample Tree viewed with ConsoleOne

Logical organization of resources independent of physical

6 edirectory- Benefits Method of centrally managing resources Means of viewing, managing and gathering network information Logical organization of resources independent of physical location Dynamic Mapping between resource and its associated object

7 edirectory- Compatible Platforms Linux NetWare Solaris Tru64 Unix NT Server Server 2000 Server 2003

8 THREE 3s- Overview 3 MAJOR COMPONENTS 3 MAJOR OBJECT TYPES 3 MAJOR TYPES OF CONTAINERS

assigned to an object s property PLUS THE SCHEMA

9 THREE 3s- 1 3 MAJOR COMPONENTS OBJECTS Information about a network resource PROPERTIES AKA Attributes VALUES Data assigned to an object s property PLUS THE SCHEMA Extensible schema, not like earlier versions of NDS which were static

10 FLAT FILE NAME SPACE USED IN NW 3 AND NT 4

11 THREE 3s- 2 3 MAJOR OBJECTS TYPES TREE OBJECT CONTAINERS LEAF

12 THREE 3s- 3 3 MAJOR CONTAINER TYPES COUNTRY ORGANIZATION ORGANIZATIONAL UNIT

13 4 ATTRIBUTE TYPES COUNTRY C ORGANIZATION -O ORGANIZATIONAL UNIT OU LEAF - CN

be deleted, moved, or renamed from Tree Object.

14 Tree Object Think about the Internet Tree- Upside down Required Can Contain C, O, or alias to C, or O, and a Security Container Cannot be deleted, moved, or renamed from Tree Object. The value assigned to the Tree Object can be changed. Also known as [ROOT] in some utilities

15 Country Object Optional. Not Required Can exist in the Tree object Can contain O or alias to O 2 Letter Country Code designator Cannot contain Tree Object.

Can exist in the Tree Object or the Country.

16 Required object Organization Object Best practice is to have 1. Can have multiple Os at the same layer. Can exist in the Tree Object or the Country. Can contain OUs and Leaf Objects. Cannot contain Tree Object, Country or other Organization Objects, or alias to these.

17 Organizational Unit Object Optional but should use them for partitioning and replication Can contain OUs and Leaf objects Cannot contain Os, Cs, or Tree Objects.

18 edirectory-sample Container Hierarchy

19 Leaf Objects Resources of all types Volumes Users Servers Groups LDAP Groups and Servers Printing objects Alias

Workflow and Workgroups Design the Tree as a Pyramid-bottom

20 Tree Design 101 Top Layers of the Tree- WAN connections or Geographical Locations Bottom Layers of the Tree based on Workflow and Workgroups Design the Tree as a Pyramid-bottom heavy Make it Easy to Use Make it Easy to Administer Make it Secure

21 NetAdmin

22 NetWare Administrator

23 edirectory-sample Tree viewed with ConsoleOne

24 imanager Roles and Tasks-1

25 imanager Roles and Tasks 2

26 Object Naming 101 (Fully) Distinguished Name Relative Distinguished Name Typeful- C, O, OU, CN Typeless Context Current Context

27 .CN=PUTZ.OU=SALES.OU=LOC2.O= XYZ.PUTZ.SALES.LOC2.XYZ edirectory NAMING EXAMPLE IF CC=LOC1.XYZ THEN RDN FOR DAFFY= DAFFY.IS IF CC=IS.LOC1.XYZ, THEN ADMIN CAN LOGIN AS ADMIN..

28 DISTINGUISHED NAME LEADING PERIOD PERIOD SEPARATORS BETWEEN CONTEXTUAL ELEMENTS NO TRAILING PERIODS CAN BE TYPEFUL OR TYPELESS

LEFTMOST SUCH CONTEXTUAL ELEMENT AS EXISTS IN CURRENT CONTEXT

29 RELATIVE DISTINGUISHED NAME NO LEADING PERIOD PERIOD SEPARATORS BETWEEN CONTEXTUAL ELEMENTS CAN HAVE TRAILING PERIOD TO REMOVE LEFTMOST SUCH CONTEXTUAL ELEMENT AS EXISTS IN CURRENT CONTEXT CAN BE TYPEFUL OR TYPELESS RELATIVE DN + CC= DN SIMPLEST RDN= CN

30 .CN=PUTZ.OU=SALES.OU=LOC2.O= XYZ.PUTZ.SALES.LOC2.XYZ edirectory NAMING EXAMPLE IF CC=LOC1.XYZ THEN RDN FOR DAFFY= DAFFY.IS IF CC=IS.LOC1.XYZ, THEN ADMIN CAN LOGIN AS ADMIN..

31 Click on the following link to return to the home pagehttp://

Identify and Describe edirectory Components

... Introduction to edirectory 97 Identify and Describe edirectory Components Before you dive into the deep end of the pool, you need to understand a term that governs edirectory: schema. This is much