When communication takes place with TLS, the communication is usually encrypted. If clients have been issued certificates, TLS/SSL can be used by Directory Server to confirm that the client has the right to access the server. TLS/SSL is used to perform other security activities, such as message integrity checks, digital signatures, and mutual authentication between servers.

NOTE:Directory Server runs as a daemon; the process is ns-slapd.1.2.2 Server plug-ins overview

Directory Server relies on plug-ins to add functionality to the core server. For example, a database layer is a plug-in. Directory Server has plug-ins for replication, chaining databases, and other different directory functions.

Generally, a plug-in can be disabled, particularly plug-ins that extend the server functionality. When disabled, the plug-in's configuration information remains in the directory, but its function is not used by the server. Depending on what the directory is supposed to do, any of the plug-ins provided with Directory Server can be enabled to extend the Directory Server functionality. (Plug-ins related to the core directory service operations, like backend database plug-in, naturally cannot be disabled.)

For more information on the default plug-ins with Directory Server and the functions available for writing custom plug-ins, see the HP-UX Directory Server plug-in reference.

1.2.3 Overview of the basic directory tree

The directory tree, also known as a directory information tree (DIT), mirrors the tree model used by most file systems, with the tree's root, or first entry, appearing at the top of the hierarchy. During installation, Directory Server creates a default directory tree.

Figure 1-1 Layout of default Directory Server directory tree

The root of the tree is called the root suffix. For information about naming the root suffix, see “Choosing a suffix”.

After a standard installation, the directory contains three subtrees under the root suffix:

•cn=config, the subtree containing information about the server's internal configuration.

•o=NetscapeRoot, the subtree containing the configuration information of the Directory Server and Administration Server.

NOTE:

When additional instances of Directory Server are installed, they can be configured not to have an o=NetscapeRoot database; in that case, the instances use a configuration directory (or the o=NetscapeRoot subtree) on another server. See the HP-UX Directory Server installation guide for more information about choosing the location of the configuration directory.

•cn=monitor, the subtree containing Directory Server server and database monitoring statistics.

1.2 Introduction to Directory Server

11