Contents


About This Guide

What You Are Expected to Know
The iPlanet Meta-Directory Documentation Set
Organization of This Guide
Documentation Conventions

Typographic Conventions
Terminology

Where to Find Additional Information

Part 1 Getting Started

Chapter 1 Meta-Directory Overview

What is Meta-Directory?
Meta-Directory Components

Connectors

Direct Connectors
Indirect Connectors

Join Engine

Join Process

Meta-Directory Views

Meta View
Connector Views

How Meta-Directory Works

Chapter 2 Meta-Directory Principles at Work

The LDIF Data File
The CSV Data File
The Oracle Database
Background Information
Configuration of Connectors and Join Process Rules

Flowing LDIF Data to the Connector View
Flowing LDAP Data to the Meta View

Constructing an Attribute
Mapping Attribute Flow Rules
Creating the Entry's Distinguished Name

Mapping CSV Data to LDAP Using the UTP

Mapping CSV Data to LDAP Attributes
Mapping LDAP Attributes to the Connector View

Flowing LDAP-configured CSV Data to the Meta View

Mapping LDAP-configured CSV Data to the Meta View

Flowing Oracle Data to the Meta View

Configuring the Oracle Database as a Recognizable Data Server
Constructing an Attribute for the Oracle Database
Creating Attribute Flow Rules for the Oracle Database
Creating DN Mapping Rules for the Oracle Database

Integration of the Data With Join Rules

Applying Rules to the Participating View

Chapter 3 Quick Start

Chapter 4 The Console Interface

iPlanet Console

To Access A Console

iPlanet Administration Server Console
iPlanet Directory Server Console
iPlanet Meta-Directory Console

Menus

Console
Edit
View
Object
Tools
Help

Part 2 The Join Engine

Chapter 5 Configuring The Join Engine

What is the Join Engine?
Creating the Join Engine Instance

To Create a Join Engine Instance
To Remove a Join Engine Instance

What is the Join Process?
Join Process Rules and Rule Sets

Rule Sets
Join Process Rules

Optional Token Assignments (Format Operator)
Selection Criteria (Requirements Operator)
To Compose Entry Conditions
To Compose Attribute Conditions
To Compose Language Tagged Attribute Conditions
Combining Conditions
Distinguished Name Construction/Join Filter/Attribute Construction (Substitution Operator)

Configuring the Join Process

Join Rules

Working With Join Rules
To Create New Rules
To Edit Rules
To Delete Rules
To Create A New Rule Set Name
To Assign Members to a Rule Set
To Delete Members from a Rule Set
To Delete a Rule Set
To Test a Rule

Constructed Attributes

Working With Constructed Attributes
To Name a New Constructed Attribute
To Create a Rule for a New Constructed Attribute
To Edit a Rule
To Delete a Rule
To Delete an Attribute

Attribute Flow Rules

Working With Attribute Flow
To Add a New Rule
To Add Attribute Mappings
To Edit a Rule
To Delete a Rule
To Create a New Rule Set
To Assign a Rule to the New Rule Set
To Delete a Rule From a Rule Set
To Delete a Rule Set
Attribute Flow Summary
Language Subtype Tagged Attributes

Filters

Working With Filters
To Create a New Filter
To Add a Subtree Filter
To Add an Entry Filter to the Subtree
To Remove a Subtree Filter
To Remove an Entry Filter
To Delete a Filter

Distinguished Name Mapping Rules

Working With DN Mapping Rules
To Add a New Rule
To Edit a Rule
To Delete a Rule
To Create a New Rule Set
To Assign a Rule to a Rule Set
To Edit a Rule Set
To Delete a Rule Set

Data Servers

Chapter 6 Views in Meta-Directory

Connector Views

To Add a Connector View Instance
To Remove a Connector View Instance
Providing a Connector View Description
An Enabled Connector View

Meta View

Providing a Meta View Description

To Provide Descriptive Information for a Meta View

Participating Views

Atomic Rules
To Add a Participating View
To Remove a Participating View
Configuring a Participating View

To Configure a Participating View

To Enable a Participating View

Checking Entry Links

Refreshing the Views

To Refresh the Connector View or Meta View

Part 3 Meta-Directory Connectors

Chapter 7 Connectors and Connector Rules

Direct Connectors
Indirect Connectors

The Universal Connector and Universal Text Parser
The Windows NT Domain Connector
Active Directory Connector

Indirect Connector Rules

Attribute Flow Rules
Default Attribute Value Rules
Filter Rules

Attribute Flow Rules

Granularity and Ownership
To Configure an Attribute Flow Rule
To Change a Configuration

Default Attribute Value Rules

To Configure Default Attribute Values

Filter Rules

To Add a New Filter
To Remove an RDN for an Entry
To Remove a Subtree DN
To Delete a Filter

Chapter 8 Configuring The Universal Connector

Function of the Universal Connector
Creating a Universal Connector Instance

To remove a connector instance

Configuring a Universal Connector Instance

To specify how updates are handled
To configure the schedule from and to connector views
To configure attributes for log files
To add external attributes for connectors
To include scripts for the Universal Text Connector

Restarting a Connector Instance
Implementing the Configuration

Starting the Join Engine

To start the join engine

Enabling the Connector View
Refreshing the View

Chapter 9 Configuring the Universal Text Parser

An Overview of the Universal Text Parser

Universal Text Parser Modules

The task.cfg Configuration File

Pre-configured Configuration Files
Non-Conforming Formats

Setting Up the Universal Text Parser
Creating a task.cfg File for Comma-Separated Value Data Files

Before You Begin
Creating the File

Creating a task.cfg File for Name-Value Pair Data Files

Before You Begin
Creating the File

Creating a task.cfg File for LDIF Data Files

Before You Begin
Creating the File

Chapter 10 Configuring the NT Domain Connector

Installing the Connector

To create an NT Domain Connector instance

To set connector parameters during instance creation
To set connector parameters from the configuration file

To add the instance as a participating view
To provide authorization

Configuring a Participating connector view
Creating Users

To create an NT Domain user in the meta view
To modify an NT Domain user in the meta view

Configuring Connector Rules
Configuring a Connector Instance
Activating the Configuration
Implementing the Configuration

Starting the Join Engine

To start the join engine

Enabling the Connector View
Refreshing the View

Monitoring the Connector
Data Flow for User and Group Entries

User Entries
Group Entries

Running the Connector from a Non-PDC Host
Configuration Example

Install the Connector
Configure Connector Rules
Configure a Connector Instance
Restart the Connector Instance

Chapter 11 Configuring the Active Directory Connector

Installing the Connector

To install the Active Directory Server Interface (ADSI) package
To add a connector view instance

To set configuration parameters during instance creation
To set configuration parameters from the configuration file

To add the instance as a participating view
To provide authorization

Configuring a Participating Connector View
Creating Users

To create an Active Directory user in the meta view
To modify an Active Directory user in the meta view

Configuring Connector Rules
Configuring a Connector Instance
Restarting the Connector Instance
Implementing the Configuration

Starting the Join Engine

To start the join engine

Enabling the Connector View
Refreshing the View

Monitoring the Connector
Data Flow for User and Group Entries

User Entries
Group Entries

Configuration Example

Install the Connector
Configure Connector Rules
Configure a Connector Instance
Restart the Connector Instance

Chapter 12 Configuring the Database Connector

Before You Begin
Creating the Data Server

Configuring the Data Server

To invoke the Data Servers window
To add a new database server
To provide data server information
To delete a data server

Running the Configuration Script
Adding a Connector View Instance

To add the instance
To delete the instance

Adding the Instance as a Participating View

To add a participating connector view
To remove a participating connector view

Configuring a Connector View

Creating Constructed Attribute Rules
Creating Attribute Flow Rules
Creating DN Mapping Rules
Configuring a Participating Connector View
Starting the Join Engine

To start the join engine

Enabling the Connector View
Monitoring the Connector View

Configuration Example

Create the Data Server
Configure the Participating Connector View

Changing Instrumentation

To add instrumentation
To remove instrumentation

Issuing Privileges

Script Generation
Script Execution
Synchronization of Instrumented Tables

Part 4 System Management

Chapter 13 Starting and Stopping Components

The start.conf File
Starting Meta-Directory Components

Starting Components Via the Consoles

To Start From the iPlanet Console Navigation Tree
To Start From the Meta-Directory Console Navigation Tree

Starting Components Via the Meta-Admin Command-Line Tool
Starting Components Via Windows NT Services

Automatic Start-up at Log On

Stopping Meta-Directory Components

Stopping Components Via the Console

To Stop From the iPlanet Console Navigation Tree
To Stop From the Meta-Directory Console Navigation Tree

Stopping Components Via the Meta-Admin Command-Line Tool
Stopping Components via Windows NT Services

Checking a Component's Operational Status
Automated Restarts

Automating a Restart on Windows NT Systems
Automating a Restart on Solaris Systems
Automating a Restart With High Security on Windows NT Systems

Chapter 14 Monitoring Meta-Directory Components

Operations

Join Engine Operations

Status
View
Operation
Traverse
Last Change Notification

Connector Operations

Status
View
Operation
Updates to the

Logs

Log Files
Log Window Options

Refresh
Continuous
Lines to Show
Show Only Lines Containing
Starting at
Period

Modules
Specifying Log File Preferences

Working within the Log Window

Statistics and Status Messages

Chapter 15 Administration Tools

The Query Tool

To Access the Query Tool
Searches

To Do a Search
Extensive Searches
Constructing a Search With an LDAP Filter

Customizing the Query Tool

Viewing a Selected Entry
Customizing Column Headers
Sorting the Display of Entries
To Specify Language Preferences
Customizing Content Selection Filters
To Create a New Content Selection Filter

Customizing Linkage Selection Filters

Accessing the Linkage Selection Filters Window
To Create a New Linkage Selection Filter
To Edit a Linkage Selection Filter

Query Tool Keyboard Shortcuts

The Fix-It Tool

Accessing the Fix-It Tool
To Link an Existing Entry to a New Entry
To Join, Unlink, or Exclude Entries
To Refresh a Current Entry
To view and modify an entry
Customizing the Fix-It Tool
Fix-It Tool Shortcuts

Command Line Access of the Query/Fix-It Tool

To Invoke the Query/Fix-It Tool

The Property Editor

To Alter the Properties for Members

Chapter 16 Command-Line Administration

The Meta-Admin Tool

The Meta-Admin Tool Syntax

Meta-Admin Tool Command-Line Options

Meta-Admin Tool Input
Meta-Admin Tool Responses

Chapter 17 Managing Servers and Permissions

Configuring Data Servers

Accessing the Data Servers Window
To Add a New Data Server
To Test a Data Server Connection
To Delete a Data Server

Setting Access Permissions

To Set Access Permissions

Part 5 Appendices

Appendix A The Join Process Operators

Format Operators
Requirements Operators

Combining Requirements Operators

Substitution Operators
Generic Operators
Quoting

Appendix B The Meta-Admin Protocol

The Protocol Requests

Session Attributes

The Server URL Attribute
The Configuration and Authentication Attributes

Meta-Admin Protocol Requests

start
stop
read/status
read/statistics

Protocol Responses

Error Responses

Appendix C Troubleshooting Meta-Directory

Verifying End-to-End Flow
Viewing Link Information

mdsEntityOwner
mdsLinkToCV
mdsLinkToMV

Checking Operational Status

Status Window
Statistics Window
Data Server Test Connect Button

Examining Log Files
Turning Off UID Uniqueness
Fixing Join Problems
Fixing Data Flow Problems
Fixing Large Synchronization Failures
Common Problems

Instances
Configuration
Views
Connectors
Meta-Directory
Directory Server

Appendix D Error Messages

Join Engine Messages
Universal Connector Messages

Index