Latest Articles - Page 38

Configure global, subtree, and user password policies in 389 Directory Server with dsconf pwpolicy and localpwp, enforce complexity and expiration, test precedence, and manage temporary passwords.

Use Get Effective Rights in 389 Directory Server to test ACI permissions with ldapsearch, interpret entryLevelRights and attributeLevelRights, and verify results with real LDAP operations.

Restrict 389 Directory Server anonymous LDAP access with nsslapd-allow-anonymous-access, narrow ldap:///anyone ACIs, disable unauthenticated empty-password binds, and verify root DSE, suffix, and public-attribute …

Configure 389 Directory Server macro ACIs with ($dn), [$dn], and ($attr.attributeName) to reduce duplicate rules and enforce tenant isolation.

Configure 389 Directory Server Virtual List View indexes with dsconf backend vlv-index, test server-side sorting and VLV controls with ldapsearch, and verify vlvUses and access-log usage.

Enable LDAPS and STARTTLS in 389 Directory Server, import server and CA certificates, configure client trust, and verify TLS with ldapsearch and openssl.

Create virtual directory tree views in 389 Directory Server with nsView and nsViewFilter, nested filters, LDAP search verification, indexing, limitations, and troubleshooting.

Generate synthetic LDAP test data with dsctl ldifgen in 389 Directory Server—users, groups, CoS, roles, modification workloads, and nested trees—then review and load LDIF safely.

Prepare ou=People and ou=Groups, create POSIX users and static groups with dsidm, set passwords, lock accounts, manage membership, verify LDAP attributes, and delete entries safely in 389 Directory Server.

Generate a dscreate INF template, configure instance and backend settings, protect credentials, run dscreate from-file, and verify the new 389 Directory Server suffix.

Recover a failed 389 Directory Server supplier, hub, or consumer with safe restore, replica reinitialization, RUV checks, and replication validation.

Export and import 389 Directory Server backend data with dsconf and dsctl LDIF tools, validate migration files, prepare the destination suffix, and verify users and groups after import.

Tune large LDAP groups in 389 Directory Server with safe membership indexes, scoped memberOf processing, fixup tasks, and repeatable benchmarks.

Configure 389 Directory Server disk monitoring, thresholds, grace periods, read-only protection, safe testing, and low-space recovery.

Configure 389 Directory Server Attribute Uniqueness with dsconf to reject duplicate mail, uid, and employeeNumber values across subtrees.

Configure 389 Directory Server indexes with dsconf backend index, detect notes=A and notes=U unindexed searches, and reindex online or offline for faster LDAP filters.

Configure Managed Entries to create companion LDAP entries and Linked Attributes to maintain reverse DN relationships in 389 Directory Server.

Configure the 389 Directory Server Distributed Numeric Assignment plug-in for automatic uidNumber and gidNumber allocation, magic regeneration values, separate or shared ranges, multi-supplier range transfer, monitoring, …

Configure 389 Directory Server Auto Membership with regex rules, fallback groups, fixup cleanup, and dry-run testing for static group assignment.

Enable and configure the 389 Directory Server Referential Integrity plug-in to remove stale DN references after delete, update member and uniqueMember after rename or move, scope processing, index attributes, audit …

Configure the 389 Directory Server memberOf plug-in for member and uniqueMember groups, nested membership, scopes, fixup tasks, and replication.

Disable and reactivate LDAP user accounts in 389 Directory Server with dsidm account lock, nsAccountLock, role lock, and the Account Policy plug-in for lastLoginTime tracking and automatic inactivity enforcement.

Prepare a FIPS-enabled host, enable NSS FIPS mode for 389 Directory Server, audit cryptographic compatibility, verify TLS and LDAP, and plan rollback.

Configure client certificate authentication in 389 Directory Server with certmap.conf, trust the client CA, test SASL EXTERNAL over LDAPS and STARTTLS, and verify userCertificate matching.

Inventory, renew, replace, back up, and restore 389 Directory Server TLS certificates in the instance NSS database after LDAPS and STARTTLS are already enabled.

Reject insecure LDAP simple binds in 389 Directory Server, enforce a minimum SSF, preserve root DSE and LDAPI access, and verify allowed connections.

Configure advanced 389 Directory Server ACIs with targetfilter, targattrfilters, target_from and target_to, userattr, groupdn filters, IP and DNS rules, SSF, time limits, and Boolean bind expressions.

Learn 389 Directory Server ACI syntax, placement, and access rights with ldapmodify examples for userdn and groupdn read, write, add, and delete permissions plus troubleshooting.

Delegate 389 Directory Server administration with groupdn ACIs for read-only, help-desk, user, group, and department roles without sharing Directory Manager credentials.

Enable per-backend attribute encryption in 389 Directory Server with dsconf backend attr-encrypt, export and reimport with dsctl ldif2db --encrypted, verify LDAP access, and plan certificate and replication dependencies.