system-administration
Configure Account Lockout in 389 Directory Server
Enable password-based account lockout in 389 Directory Server, set failure thresholds and unlock behaviour, inspect lockout attributes, test automatic unlock, recover locked accounts, and replicate lockout state.
system-administration
Configure Global, Subtree and User Password Policies in 389 Directory Server
Configure global, subtree, and user password policies in 389 Directory Server with dsconf pwpolicy and localpwp, enforce complexity and expiration, test precedence, and manage temporary passwords.
system-administration
Test ACI Permissions with Get Effective Rights in 389 Directory Server
Use Get Effective Rights in 389 Directory Server to test ACI permissions with ldapsearch, interpret entryLevelRights and attributeLevelRights, and verify results with real LDAP operations.
system-administration
Restrict Anonymous Access in 389 Directory Server
Restrict 389 Directory Server anonymous LDAP access with nsslapd-allow-anonymous-access, narrow ldap:///anyone ACIs, disable unauthenticated empty-password binds, and verify root DSE, suffix, and public-attribute …
system-administration
Configure Macro ACIs in 389 Directory Server
Configure 389 Directory Server macro ACIs with ($dn), [$dn], and ($attr.attributeName) to reduce duplicate rules and enforce tenant isolation.
system-administration
Configure Virtual List View Indexes in 389 Directory Server
Configure 389 Directory Server Virtual List View indexes with dsconf backend vlv-index, test server-side sorting and VLV controls with ldapsearch, and verify vlvUses and access-log usage.
system-administration
Configure TLS, STARTTLS and LDAPS in 389 Directory Server
Enable LDAPS and STARTTLS in 389 Directory Server, import server and CA certificates, configure client trust, and verify TLS with ldapsearch and openssl.
system-administration
Create Virtual Directory Views in 389 Directory Server
Create virtual directory tree views in 389 Directory Server with nsView and nsViewFilter, nested filters, LDAP search verification, indexing, limitations, and troubleshooting.
system-administration
Generate LDAP Test Data with dsctl ldifgen
Generate synthetic LDAP test data with dsctl ldifgen in 389 Directory Server—users, groups, CoS, roles, modification workloads, and nested trees—then review and load LDIF safely.
system-administration
Manage Users and Groups in 389 Directory Server
Prepare ou=People and ou=Groups, create POSIX users and static groups with dsidm, set passwords, lock accounts, manage membership, verify LDAP attributes, and delete entries safely in 389 Directory Server.
system-administration
Create a 389 Directory Server Instance with dscreate and an INF File
Generate a dscreate INF template, configure instance and backend settings, protect credentials, run dscreate from-file, and verify the new 389 Directory Server suffix.
system-administration
Restore a Replicated 389 Directory Server Safely
Recover a failed 389 Directory Server supplier, hub, or consumer with safe restore, replica reinitialization, RUV checks, and replication validation.
system-administration
Export and Import 389 Directory Server Data with LDIF
Export and import 389 Directory Server backend data with dsconf and dsctl LDIF tools, validate migration files, prepare the destination suffix, and verify users and groups after import.
system-administration
Tune Large LDAP Groups and memberOf Performance in 389 Directory Server
Tune large LDAP groups in 389 Directory Server with safe membership indexes, scoped memberOf processing, fixup tasks, and repeatable benchmarks.
system-administration
Configure Low Disk Space Protection in 389 Directory Server
Configure 389 Directory Server disk monitoring, thresholds, grace periods, read-only protection, safe testing, and low-space recovery.
system-administration
Enforce Unique LDAP Attributes in 389 Directory Server
Configure 389 Directory Server Attribute Uniqueness with dsconf to reject duplicate mail, uid, and employeeNumber values across subtrees.
system-administration
Configure 389 Directory Server Indexes for Faster LDAP Searches
Configure 389 Directory Server indexes with dsconf backend index, detect notes=A and notes=U unindexed searches, and reindex online or offline for faster LDAP filters.
system-administration
Configure Managed Entries and Linked Attributes in 389 Directory Server
Configure Managed Entries to create companion LDAP entries and Linked Attributes to maintain reverse DN relationships in 389 Directory Server.
system-administration
Assign Unique UID and GID Numbers with the 389 DS DNA Plugin
Configure the 389 Directory Server Distributed Numeric Assignment plug-in for automatic uidNumber and gidNumber allocation, magic regeneration values, separate or shared ranges, multi-supplier range transfer, monitoring, …
system-administration
Automatically Add Users to Groups with 389 DS Auto Membership
Configure 389 Directory Server Auto Membership with regex rules, fallback groups, fixup cleanup, and dry-run testing for static group assignment.
system-administration
Configure Referential Integrity in 389 Directory Server
Enable and configure the 389 Directory Server Referential Integrity plug-in to remove stale DN references after delete, update member and uniqueMember after rename or move, scope processing, index attributes, audit …
system-administration
Configure the 389 Directory Server memberOf Plugin
Configure the 389 Directory Server memberOf plug-in for member and uniqueMember groups, nested membership, scopes, fixup tasks, and replication.
system-administration
Disable, Reactivate, and Automatically Inactivate User Accounts in 389 Directory Server
Disable and reactivate LDAP user accounts in 389 Directory Server with dsidm account lock, nsAccountLock, role lock, and the Account Policy plug-in for lastLoginTime tracking and automatic inactivity enforcement.
system-administration
Enable and Verify FIPS Mode in 389 Directory Server
Prepare a FIPS-enabled host, enable NSS FIPS mode for 389 Directory Server, audit cryptographic compatibility, verify TLS and LDAP, and plan rollback.
system-administration
Configure Client Certificate Authentication in 389 Directory Server
Configure client certificate authentication in 389 Directory Server with certmap.conf, trust the client CA, test SASL EXTERNAL over LDAPS and STARTTLS, and verify userCertificate matching.
system-administration
Manage, Renew, and Back Up 389 Directory Server Certificates
Inventory, renew, replace, back up, and restore 389 Directory Server TLS certificates in the instance NSS database after LDAPS and STARTTLS are already enabled.
system-administration
Require Secure LDAP Connections with TLS and SSF in 389 Directory Server
Reject insecure LDAP simple binds in 389 Directory Server, enforce a minimum SSF, preserve root DSE and LDAPI access, and verify allowed connections.
system-administration
Advanced 389 Directory Server ACI Targets and Bind Rules
Configure advanced 389 Directory Server ACIs with targetfilter, targattrfilters, target_from and target_to, userattr, groupdn filters, IP and DNS rules, SSF, time limits, and Boolean bind expressions.
system-administration
389 Directory Server ACI Configuration with Practical Examples
Learn 389 Directory Server ACI syntax, placement, and access rights with ldapmodify examples for userdn and groupdn read, write, add, and delete permissions plus troubleshooting.
system-administration
Create Delegated Administrators with 389 Directory Server ACIs
Delegate 389 Directory Server administration with groupdn ACIs for read-only, help-desk, user, group, and department roles without sharing Directory Manager credentials.