wiki:LegacyEdirDocs
Last modified 4 years ago Last modified on 07/20/16 15:05:45

EDIR Documentation for E Boxes

All of Beth's text file documents will be placed in this node. The following are the documentation topics as found in the Documentation directory. As I read each page, I will replace the file name reference to something more meaningful. I also will put it into a more logical format for browsing.

Finally, I am using this as a way to record what has changed from when E boxes performed all processing (AUTHSERV, EDIR Self-Service, and LDAP repository) and the core LDAP repository processing was moved to the IDMP Cluster. In some cases, for example the location and names of necessary password files, has changed substantially between legacy E Box management and iPlanet on IDMP-3. In those cases, the topic remains focused on the E Box implementation.

Document Organization Overivew

Technical documentation for the directory project (EDIR) was organized by intended audience as indicated by the following file prefixes. The current organization is based on function since Identity and Access Management has assumed almost all functions. Beth Mercer's original organization is referenced as a prefix to the links below and in the page names.

  • ALL : everyone supporting the directory project
  • APACHE : individuals administering the Apache web server
  • AUTH : individuals maintaining the AUTHSERV web gateway
  • DS : individuals maintaining the underlying directory servers
  • EDIR : individuals maintaining the EDIR web gateway
  • LDAP : individuals responsible for maintaining the directory servers
  • REGI : individuals responsible for maintaining registry processes
  • SERV : individuals responsible for maintaining the servers hosting the directories and web gateways
  • UPDT : individuals responsible for maintaining the update back end to EDIR/AUTHSERV
    • integrally related to registry

iPlanet and Process_flows Categories

  • iPlanet : directory containing copies of iPlanet technical documentation
  • process_flows: directory containing web versions of Visio documents showing process flows

Functions No Longer Applicable to Current EDIR Self-Service and AUTHSERV

  • ISW : individuals responsible for configuring/maintaining ISW within the directory
  • KERB : individuals responsible for supporting kerberos/directory interactions

Enterprise Directory Architecture

ALL: Overview of Enterprise Directory Architecture
ALL: Enterprise Directory Record Lifecycle (LDAP_REG.STATE)

EDIR Security

ALL: Directory Related Security
ALL: EDIR/AUTHSERV Access Control
ALL: Directory Account Administration
ALL: Maintenance of iPlanet ACIs
ALL: EDIRrole and Associated iPlanet Roles
ALL: eduIsMemberOf and Associated Group Records
ALL: iPlanet Password Policies
APACHE: Sharing iPlanet Certificates
APACHE: SSL Certificate Requirements
LDAP: Managing EDIR Passwords

Understanding the EDIR EBox Servers

ALL: Accounts, Roles, and Groups Utilized by UPDATE, EDIR, and AUTHSERV

Managing EDIR Infrastructure

ALL: Areas of Responsibiity
ALL: How to Modify the EDIR Schema
ALL: How to Disable EDIR/AUTHSERV Updates
LDAP: Starting and Stopping Directory Instances

Processes and Process Management

AUTH: AUTHSERV Related Processes
AUTH: AUTHSERV Utility Scripts
EDIR: EDIR Related Batch Processes
EDIR: EDIR Utility Scripts

Gateway Processes

AUTH: AUTHSERV Gateway Scripts
EDIR: EDIR Gateway Scripts
UPDT: UPDATE Gateway Scripts
DS: Patches Applied in 2006

Managing EDIR Data

EDIR: Ad Hoc Changes to EDIR accounts
LDAP: EDIR Account Management Processes and Associated Utilities
LDAP: Synchronize Banner and LDAP Data

AppWorx Management

ALL: Appworx Configuration in Support of LDAP/EDIR Related Jobs

Processing LDAP Data

UPDT: Monthly Process: EDIR Unit Changes Following BOR Structure Table Changes

File Listing

LDAP_init_directory
LDAP_known_issues
LDAP_migrate_instance
LDAP_repop_directory
LDAP_servicenamed_cert_renewal
LDAP_temp_lock_removal
LDAP_troubleshooting
REGI_batch_jobs
REGI_bulk_mail_err_res
REGI_bulk_update_process
REGI_migrate_account
REGI_process_extract
REGI_resolving_lock_problems
REGI_troubleshooting
REGI_zuausr_objects
SERV_configure_apache
SERV_configure_server
SERV_server_deployment
SERV_space_consumption
SERV_truncate_changelogdb
UPDT_FATAL_errors
UPDTarchitecture
UPDT_archive_output
UPDT_batch_jobs
UPDT_business_process_rules
UPDT_process_purge
UPDT_unit_changes
UPDT_unit_deletes
LDAP_batch_jobs UPDT_utility_scripts
LDAP_cert_import UPDT_validate_sync
LDAP_cert_sharing expanded_architecture_20041_09_07.pdf
LDAP_expired_cert iPlanet_docs
LDAP_force_logroll misc
LDAP_hostnamed_cert_renewal process_flows
uakLocalEmail_spec_20051101_final.pdf