Manuals / Sun Microsystems / Computer Equipment / Server

Sun Microsystems 8190994 manual Load Balancing Property

Models: 8190994

1 148

Download 148 pages 5.33 Kb

Page 99

		Mapping the Properties Configuration

TABLE 6–15Mapping of ids-proxy-sch-LDAPServer Attributes to Data Source Properties

	Directory Proxy Server 5 Attribute	Directory Proxy Server 6.0 Property

	ids-proxy-con-host	ldap-address

	ids-proxy-con-port	ldap-port

	ids-proxy-con-sport	ldaps-port

	ids-proxy-con-supported-version	No equivalent
		Directory Proxy Server 6.0 supports LDAP v3
		backends for both version 2 and version 3 clients.
		Directory Proxy Server 6.0 supports the proxy
		authorization control version 1 and version 2.

	ids-proxy-con-use-version	No equivalent
		Directory Proxy Server 6.0 supports LDAP v3
		backends for both v2 and v3 clients.
		Directory Proxy Server 6.0 supports the proxy
		authorization control version 1 and version 2.

	ids-proxy-con-tcp-no-delay	use-tcp-no-delay

	ids-proxy-con-link-security-policy	ssl-policy

	ids-proxy-con-x509cert-subject	No equivalent. Directory Proxy Server 6.0 does not
		check the subject of the certificate provided by the
		backend server.

	ids-proxy-con-keepalive-interval	This functionality is achieved by setting the
		following properties of the LDAP data source:
		monitoring-bind-timeout
		monitoring-entry-timeout
		monitoring-inactivity-timeout
		monitoring-interval
		For information about setting LDAP data source
		properties, see “To Configure an LDAP Data
		Source” in Sun Java System Directory Server
		Enterprise Edition 6.0 Administration Guide.

Load Balancing Property

In Directory Proxy Server 5, the ids-proxy-sch-LoadBalanceProperty is used to configure load balancing across multiple LDAP servers. Directory Proxy Server 5 supports proportional

Chapter 6 • Migrating Directory Proxy Server

99

Sun Confidential: Registered

Image 99

Sun Microsystems 8190994 manual Load Balancing Property

Contents

Sun Microsystems, Inc Network Circle Santa Clara, CA Enterprise Edition 6.0 Migration Guide070222@16599 Contents Architectural Changes in Directory Server Migrating a Replicated TopologyMigrating Directory Proxy Server Migrating Identity Synchronization for Windows 105Index 145 Sun Confidential Registered Figures Sun Confidential Registered Tables Mapping Between 5 and 6.0 Password Policy AttributesTables Examples Sun Confidential Registered Who Should Use This Book Before You Read This BookHow This Book Is Organized Table P-1Directory Server Enterprise Edition Documentation Directory Server Enterprise Edition Documentation SetTable P-1 Directory Server Enterprise Edition Documentation Related ReadingDefault Paths and Command Locations Default PathsRedistributable Files Table P-2Default Paths Table P-3Command Locations Command LocationsTable P-3 Command Locations Typographic ConventionsTable P-4Typographic Conventions Table P-5Shell Prompts Shell Prompts in Command ExamplesSymbol Conventions Symbol ConventionsSearch-termsitedocs.sun.com Documentation, Support, and TrainingThird-Party Web Site References Searching Sun Product DocumentationSun Welcomes Your Comments Before You Migrate Overview of the Migration Process for Directory ServerBefore You Migrate Outline of Migration Steps Deciding on the New Product Distribution1Migration Matrix Showing Support for Automated Migration Deciding on Automatic or Manual MigrationAbout the Automatic Migration Tool Automated Migration Using the dsmig CommandPrerequisites for Running dsmig Using dsmig to Migrate the SchemaUsing dsmig to Migrate Configuration Data Using dsmig to Migrate Security DataChained Suffix Configuration Data Plug-in Configuration DataConfiguration Attributes Not Migrated by dsmig Configuration Data For Suffixes With Multiple BackendsReplication Configuration Data Configuration Data for o=netscapeRootNsproxiedauthorization NsbindtimeoutNsmaxresponsedelay NsmaxtestresponsedelayTasks to be Performed After Automatic Migration Using dsmig to Migrate User DataSun Confidential Registered Chapter covers the following topics Before You Start a Manual MigrationValues of the following attribute types must be migrated Migrating the Schema ManuallyMigrating Configuration Data Manually Migration of Specific Configuration AttributesGlobal Configuration Attributes NsKeyfile NsCertfile Security Configuration AttributesFeature Configuration Attributes Mapping Tree Configuration Attributes2Fractional Replication Attribute Name Changes Replication Configuration AttributesDs5ReferralDelayAfterInit NsDS5Flags NsDS5ReplicaBindDN 1Change Log Attribute Name ChangesReplication Agreement Configuration Password Policy Configuration Attributes3Mapping Between 5 and 6.0 Password Policy Attributes UniqueID Generator Configuration Attributes Database Configuration AttributesSnmp Attributes NsActivechainingComponents NsTransmittedControls Chained Suffix AttributesPlug-In Configuration Attributes Nsslapd-pluginarg* nsslapd-pluginenabledNsslapd-pluginarg0 nsslapd-pluginenabled Nsslapd-pluginarg Nsslapd-pluginenabled Pass Through Authentication Plug-InMigrating Security Settings Manually Update the certificate database password$ dsadm set-flags instance-pathcert-pwd-prompt=on Migrating User Data Manually Start the new instance$ dsadm import instance-pathchangelog.ldif cn=changelog Tasks to be Performed After Manual Migration Migrating User Plug-Ins ManuallyOverview of Migrating Replicated Servers Migrating a Replicated TopologyMigration of Referrals Issues Related to Migrating Replicated ServersIssues With the New Password Policy Migration of Replication AgreementsManual Reset of Replication Credentials Problems Related to Tombstone PurgingNew Replication Recommendations Migration Scenarios Migrating a Replicated Topology to an IdenticalMigrating the Consumers Master a Hub a Consumer a Master B Hub B Consumer B 3Migrating the version 5 Consumer Next step involves migrating the version 5 consumer4Placing the 6.0 Consumer Into the Topology Migrating the Hubs6Isolating the Hub From the Topology 7Migrating the version 5 Hub Next step involves migrating the version 5 hub8Placing the 6.0 Hub Into the Topology Migrating the MastersMaster a Master B Hub a 10Isolating the Master From the Topology Next step involves migrating the version 5 masterMigrating a Replicated Topology to a New Topology 13Existing version 5 Topology Migrating All the Servers14Existing Topology With Migrated Servers Promoting the Hubs15Migrated Topology With Promoted Hub Replicas Promoting the Consumers16New Fully-Meshed All-Master Topology Migrating Over Multiple Data CentersSun Confidential Registered Removal of the ServerRoot Directory Changes in the Administration FrameworkChanges in Suffix-Level ACIs Changes to ACIsRemoval of the o=netscapeRoot Suffix Changes in the ACI Scope1Directory Server 5 and 6 commands Command Line ChangesDirectory Server 5 and 6 commands 3Version 5 Commands That Have Been Deprecated Deprecated CommandsChanges to the Console New Password PolicyPassword Policy Compatibility New-modeaction takes one of the following values Generates the new equivalent password policy attributesUsing fractional replication Password policy attributes in the databaseChanges to Plug-Ins New Plug-Ins in Directory ServerFollowing plug-ins have been added in Directory Server Following plug-ins have been deprecated in Directory Server Changes to the Installed Product LayoutPlug-Ins Deprecated in Directory Server Changes to the Plug-In APIOnline Help Previously Under ServerRoot/manual Binaries Previously Under ServerRoot/bin5Tools Previously Under ServerRoot/shared/bin Plug-Ins Previously Under ServerRoot/pluginsUtilities Previously Under ServerRoot/shared/bin 4Support for Plug-Ins6Location of Certificate and Key Files Certificate and Key Files7Instance-Specific Subdirectories Silent Installation and Uninstallation TemplatesServer Instance Scripts Previously Under Server Instance SubdirectoriesMigrating Directory Proxy Server Mapping the Global ConfigurationMapping the Global Configuration Administration Guide Mapping the Global Security ConfigurationAccess Control on the Proxy Configuration 2Mapping of Security ConfigurationManaging Certificates 3Mapping of Connection Pool Attributes Mapping the Connection Pool ConfigurationMapping the Groups Configuration Mapping the Group Object$ dpconf help-properties grep connection-handler Mapping the Network Group Object Mapping Bind Forwarding $ dpconf help-properties grep request-filtering-policy Mapping Operation ForwardingMapping Subtree Hiding Mapping Search Request Controls$ dpconf help-properties grep resource-limits-policy Mapping Attributes Modifying Search Requests Mapping Compare Request Controls$ dpconf help-properties grep search-data-hiding-rule Mapping Attributes Restricting Search ResponsesAttributesattribute-name Mapping the Referral Configuration AttributesMapping the Server Load Configuration Mapping the Properties Configuration Attribute Renaming PropertyForbidden Entry Property $ dpconf help-properties grep ldap-data-source Ldap Server PropertyLoad Balancing Property $ dpconf help-properties grep ldap-data-source-pool Monitoring Backend ServersLog Property Search Size Limit Property17Version 5 and Version 6 Log Functionality Mapping the Events Configuration Mapping the Actions Configuration Migrating Identity Synchronization for Windows Before You Migrate Identity Synchronization for Windows Migration OverviewPreparing for Identity Synchronization for Windows Migration Exporting Version 1.1 ConfigurationInserting Clear-Text Passwords Using the export11cnf UtilityFollowing sample exported configuration file Sample Export Configuration FileInsert Password Between the Double Quotes in the Above Field TopologyHost PortSSLOption=true SecurePort=3269 112 Field Checking for Undelivered Messages Using the checktopics UtilityRerun checktopics To Clear MessagesMigrating Your System Forcing Password Changes on Windows NT1Migrating a Single-Host Deployment Preparing for MigrationJAVAHOME%\\bin\\jar -xf filename Uncompress -c filename tar xfOn Solaris, type the following command On Windows, type the following commandTar cf /var/tmp/connector-state.tar persist etc To Uninstall Identity Synchronization for Windows Version Uninstalling Identity Synchronization for WindowsNet stop Sun ONE Identity Synchronization for Windows On Windows type the following commands Installing or Upgrading the Dependent ProductsInstalling Identity Synchronization for Windows On Solaris type the following commandsIdsync prepds arguments\ On Windows NT only, complete the following steps124 Manually Uninstalling 1.1 Core and Instances from Solaris What to Do if the 1.1 Uninstallation FailsUsr/ucb/ps -gauxwww grep java To Manually Uninstall Core From a Solaris MachineUse the rm -rf command to remove the following directories ServerRoot/isw-hostname/imquninstallPkginfo grep -i Identity Synchronization Etc/imq Var/imq Usr/bin/imqVar/sadm/install/productregistry Cn=pswsync,cn=plugins,cn=configClean up the configuration directory as follows Manually Uninstalling 1.1 Core and Instances from Windows To uninstall Core from a Windows 2000 machine Net stop slapd-myhostname ServerRoot\\\lib\\psw-plugin.soMigrating Identity Synchronization for Windows 133 For example, C\Program Files\Sun\mps\isw-example \\Program Files\\Sun\\mps\\java\\jars\\isw Manually Uninstalling a 1.1 Instance from Windows NTServerRoot\\\isw-hostname\ Migrating Identity Synchronization for Windows 137 138 For example, C\\Program Files\\Sun\\mps\\isw-example Other Migration ScenariosSample deployment scenarios include Multi-Master Replication Deployment2Migrating a Multi-Master Replication Deployment Multi-Host Deployment with Windows NT2Multi-Host Deployment 3Migrating a Multi-Host Deployment with Windows NT Checking the Logs Change Detector subcomponents IndexInstance-path,19 147 Synchronizing, changes with Directory Server XML configuration documents