<chapter id="overview-1"><title>Introduction to LDAP Naming Services (Overview/Reference)</title><highlights><para>The LDAP chapters describe how to set up a Solaris LDAP naming services client to work with Sun Java System Directory Server (formerly Sun ONE Directory Server). However, while using the Sun Java System Directory Server is recommended, it is not required. A brief description of generic directory server requirements appears
in <olink targetptr="schemas-1" remap="internal">Chapter&nbsp;14, LDAP General Reference (Reference)</olink>.</para><note><para>A directory server is not necessarily an LDAP server. However, in the context of these chapters, the term &ldquo;directory server&rdquo; is  synonymous with &ldquo;LDAP server.&rdquo;</para>
</note>
</highlights><sect1 id="overview-1124"><title>Audience Assumptions</title><para>The LDAP naming services chapters are written for system administrators who already have a working knowledge of LDAP. Following is a partial list of concepts with which you must be very familiar. Otherwise, you might have difficulty using this guide to deploy LDAP naming services in the Solaris system.</para><itemizedlist><listitem><para>LDAP Information Model (entries, object classes, attributes, types, values)</para>
</listitem><listitem><para>LDAP Naming Model (Directory Information Tree (DIT) structure)</para>
</listitem><listitem><para>LDAP Functional Model (search parameters: base object (DN), scope, size limit, time limit, filters (browsing indexes for the Sun Java System Directory Server), attribute list)</para>
</listitem><listitem><para>LDAP Security Model (authentication methods, access control models)</para>
</listitem><listitem><para>Overall planning and design of an LDAP directory service, including how to plan the data and how to design the DIT, topology, replication, and security</para>
</listitem>
</itemizedlist><sect2 id="overview-1127"><title>Suggested Background Reading</title><para>To learn more about any of the aforementioned concepts or to study LDAP and the deployment of directory services in general, refer to the following sources:</para><itemizedlist><listitem><para><citetitle>Understanding and Deploying LDAP Directory Services</citetitle> by Timothy A. Howes, Ph.D. and Mark C. Smith</para><para>In addition to providing a thorough treatment of LDAP directory services, this book includes useful case studies on deploying LDAP. Examples of deployments include a large university, a large multinational enterprise, and an enterprise with an extranet.</para>
</listitem><listitem><para>Sun Java System Directory Server <citetitle>Deployment Guide</citetitle>, which is included with the Sun Java Enterprise System documentation</para><para>This guide provides a foundation for planning your directory, including directory design, schema design, the directory tree, topology, replication,  and security. The last chapter provides sample deployment scenarios to help you plan both simple, smaller-scale deployments and complex worldwide deployments.</para>
</listitem><listitem><para>Sun Java System Directory Server <citetitle>Administration Guide</citetitle>, which is included with the Sun Java Enterprise System documentation</para>
</listitem>
</itemizedlist>
</sect2><sect2 id="overview-1128"><title>Additional Prerequisite</title><para>If you need to install Sun Java System Directory Server, refer to the <citetitle>Installation Guide</citetitle> for the version of Sun Java System Directory Server that you are using.</para>
</sect2>
</sect1><sect1 id="overview-9"><title>LDAP Naming Services Compared to Other Naming Services</title><para>The following table shows a comparison between the DNS, NIS, NIS+, and LDAP naming services.</para><informaltable frame="topbot"><tgroup cols="5" colsep="0" rowsep="0"><?PubTbl tgroup dispwid="7.68in"?><colspec colname="colspec1" colwidth="10.64*"/><colspec colname="colspec2" colwidth="12.23*"/><colspec colname="colspec3" colwidth="10.90*"/><colspec colname="colspec4" colwidth="9.57*"/><colspec colname="colspec6" colwidth="11.25*"/><thead><row rowsep="1"><entry><para></para>
</entry><entry><para>DNS</para>
</entry><entry><para>NIS</para>
</entry><entry><para>NIS+</para>
</entry><entry colname="colspec6"><para>LDAP</para>
</entry>
</row>
</thead><tbody><row><?PubTbl row rht="0.85in"?><entry><para><emphasis role="strong">Namespace</emphasis></para>
</entry><entry><para>Hierarchical</para>
</entry><entry><para>Flat</para>
</entry><entry><para>Hierarchical</para>
</entry><entry colname="colspec6"><para>Hierarchical</para>
</entry>
</row><row><entry><para><emphasis role="strong">Data Storage</emphasis></para>
</entry><entry><para>Files/resource records</para>
</entry><entry><para>2 column maps</para>
</entry><entry><para>Multi-columned tables</para>
</entry><entry colname="colspec6"><para>Directories (varied)</para><para>Indexed database</para>
</entry>
</row><row><entry><para><emphasis role="strong">Servers</emphasis> </para>
</entry><entry><para>Master/slave</para>
</entry><entry><para>Master/slave</para>
</entry><entry><para>Root master/</para><para>non-root master; primary/</para><para>secondary; cache/stub</para>
</entry><entry colname="colspec6"><para>Master/replica</para><para>Multi master replica</para>
</entry>
</row><row><entry><para><emphasis role="strong">Security</emphasis></para>
</entry><entry><para>None</para>
</entry><entry><para>None (root or nothing)</para>
</entry><entry><para>Secure RPC (AUTH_DH)</para><para>Authentication </para>
</entry><entry colname="colspec6"><para>SSL, varied</para>
</entry>
</row><row><entry><para><emphasis role="strong">Transport</emphasis></para>
</entry><entry><para>TCP/IP</para>
</entry><entry><para>RPC</para>
</entry><entry><para>RPC</para>
</entry><entry colname="colspec6"><para>TCP/IP</para>
</entry>
</row><row><entry colname="colspec1"><para><emphasis role="strong">Scale</emphasis> </para>
</entry><entry colname="colspec2"><para>Global</para>
</entry><entry colname="colspec3"><para>LAN</para>
</entry><entry colname="colspec4"><para>LAN</para>
</entry><entry colname="colspec6"><para>Global</para>
</entry>
</row>
</tbody>
</tgroup>
</informaltable><sect2 id="overview-1125"><title>Advantages of LDAP Naming Services</title><itemizedlist><listitem><para>LDAP enables you to consolidate information by replacing application-specific databases, which reduces the number of distinct databases to be managed.</para>
</listitem><listitem><para>LDAP allows data to be shared by different naming services.</para>
</listitem><listitem><para>LDAP provides a central repository for data.</para>
</listitem><listitem><para>LDAP allows for more frequent data synchronization between masters and replicas.</para>
</listitem><listitem><para>LDAP is multi-platform and multi-vendor compatible.</para>
</listitem>
</itemizedlist>
</sect2><sect2 id="overview-1126"><title>Restrictions of LDAP Naming Services</title><para>Following are some restrictions associated with LDAP naming services:</para><itemizedlist><listitem><para>Clients prior to Solaris 8 are not supported.</para>
</listitem><listitem><para>An LDAP server cannot be its own client.</para>
</listitem><listitem><para>Setting up and managing an LDAP naming services is more complex and requires careful planning.</para>
</listitem><listitem><para>A NIS client and a Native LDAP client cannot co-exist on the same client machine.</para>
</listitem>
</itemizedlist><note><para>A directory server (an LDAP server) <emphasis>cannot</emphasis> be its own client. That is, you cannot configure the machine that is running the directory server software to become an LDAP naming services client.</para>
</note>
</sect2>
</sect1><sect1 id="overview-1131"><title>LDAP Naming Services Setup (Task Map)</title><informaltable frame="topbot"><tgroup cols="2" colsep="0" rowsep="0"><colspec colname="colspec0" colwidth="50*"/><colspec colname="colspec1" colwidth="50*"/><thead><row><entry colname="colspec0" rowsep="1"><para>Task</para>
</entry><entry colname="colspec1" rowsep="1"><para>For Instructions</para>
</entry>
</row>
</thead><tbody><row><entry colname="colspec0"><para>Confirm that patch is installed</para>
</entry><entry colname="colspec1"><para>&nbsp;</para>
</entry>
</row><row><entry colname="colspec0"><para>Plan the network model</para>
</entry><entry colname="colspec1"><para><olink targetptr="planldap-11" remap="internal">Planning the LDAP Network Model</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Plan the DIT</para>
</entry><entry colname="colspec1"><para><olink targetptr="planldap-1" remap="internal">Chapter&nbsp;10, Planning Requirements for LDAP Naming Services (Tasks)</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Set up replica servers</para>
</entry><entry colname="colspec1"><para><olink targetptr="sundssetup-8" remap="internal">LDAP and Replica Servers</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Plan the security model</para>
</entry><entry colname="colspec1"><para><olink targetptr="planldap-2" remap="internal">Planning the LDAP Security Model</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Choose client profiles and default attribute values</para>
</entry><entry colname="colspec1"><para><olink targetptr="planldap-3" remap="internal">Planning Client Profiles and Default Attribute Values for LDAP</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Plan the data population</para>
</entry><entry colname="colspec1"><para><olink targetptr="planldap-4" remap="internal">Planning the LDAP Data Population</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Configure Sun Java System Directory Server prior to using it with LDAP naming services</para>
</entry><entry colname="colspec1"><para><citetitle>Sun ONE Directory Server 5.2 (Solaris Edition)</citetitle></para>
</entry>
</row><row><entry colname="colspec0"><para>Set up Sun Java System Directory Server for use with LDAP naming clients</para>
</entry><entry colname="colspec1"><para><olink targetptr="sundssetup-13" remap="internal">Chapter&nbsp;11, Setting Up Sun Java System Directory Server With LDAP Clients (Tasks)</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Manage printer entries</para>
</entry><entry colname="colspec1"><para><olink targetptr="sundssetup-27" remap="internal">Managing Printer Entries</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Initialize an LDAP client</para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-49" remap="internal">Initializing an LDAP Client</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Initialize a client by using profiles</para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-50" remap="internal">Using Profiles to Initialize a Client</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Initialize a client manually </para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-51" remap="internal">Initializing a Client Manually</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Uninitialize a client</para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-71" remap="internal">Uninitializing a Client</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Use service search descriptors to modify client profiles</para>
</entry><entry colname="colspec1"><para><olink targetptr="sundssetup-1" remap="internal">Using Service Search Descriptors to Modify Client Access to Various Services</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Retrieve naming service information</para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-59" remap="internal">Retrieving LDAP Naming Services Information</olink></para>
</entry>
</row><row><entry colname="colspec0"><para>Customize a client environment</para>
</entry><entry colname="colspec1"><para><olink targetptr="clientsetup-63" remap="internal">Customizing the LDAP Client Environment</olink></para>
</entry>
</row>
</tbody>
</tgroup>
</informaltable>
</sect1>
</chapter>