Netscape Directory Deployment Guide
Table of Contents

Introduction
    What Is in This Book?
    Conventions Used in This Book

Chapter 1 Welcome to the Directory Server
    About the Enterprise
    What Is a Directory Service?
      N+1 Directory Services
      Global Directory Services
      LDAP
    The Netscape Directory Server
      Client-Server Architecture
      Server-Side Architecture
    Directory Server Concepts
      The Directory Tree
      Distinguished Names
      Suffix
      Root Entry
      Root Distinguished Name
      Base Distinguished Name
      Secure Sockets Layer

Chapter 2 Directory Deployment Overview
    Directory Design Activities Overview
    Deployment Advice

Chapter 3 Planning Your Directory Data
    Data Planning Overview
    Introduction to Directory Data
      Examples of Directory Data
      What Your Directory Should Not Include
    Data Planning
    Performing the Site Survey
    Analyzing Your Site Survey
      Data Mastering
        Data Mastering for Replication
        Data Mastering Across Multiple Applications
      Data Ownership
      Determining Data Access
      Documenting Your Site Survey
      Directory Schema Design

Chapter 4 Planning Directory Schema
    Directory Data Representation Overview
    Object Classes
      Standard Object Classes
      Inheritance
    Attributes
      Required Versus Optional Attributes
      A Note About Attribute Values
    Schema Checking
    Customizing the Schema
      When You Should Extend Your Schema
      When to Add New Object Classes and Attributes
        Object Class Strategies
      A Consistent Schema
      Schema Extension Frequently Asked Questions

Chapter 5 Planning Security Policies
    Security Policy Overview
    Directory Access Rules
      User Authentication
      Certificate-Based Authentication
      Authenticating Using Directory Server for NT
      Anonymous Access
      Root DN Authentication
    Access-Control Lists
    Setting Permissions
      The Precedence Rule
      Allowing or Denying Access
      When to Explicitly Deny Access
      Where to Place Access-Control Rules
      Using Filtered Access-Control Rules
    The ACI Format
      Targets
      Permissions
      Bind Rules
      Using ACIs: Some Hints and Tricks
    Creating a Security Policy
      Planning Your Groups
        Group Usage Advice
      Determining General Directory Access
      Determining Points of Access

Chapter 6 Directory Tree Design
    Directory Tree Overview
      Multiple Suffixes
      Planning Your Directory Suffix(es)
        Selecting a Suffix
        Using Multiple Suffixes: ISPs
        Using Multiple Suffixes: Large Enterprises and Extranets
    Branching Your Directory Tree
      Branch Point Distinguished Name Attributes
      Branching Strategies
        Branching to Support Replication or Referrals
        Branching to Support Access-Control
        Branching to Support International Enterprises
    Naming Person Entries
    Naming Non-Person Entries

Chapter 7 Planning Replication
    Replication Overview
      Supplier Servers
      Consumer Servers
    Replicating Directory Trees
      Cascading Replicas
      Subtree Replication
      Multiple Subtree Replication
      Initiating Replication
      Directory Entries used to Support Replication
        Supplier-Initiated Replication
        Consumer-Initiated Replication
    Building a Highly Available Directory Service
      Using Replication for High Availability
      Using Replication for Load Balancing
        Load Balancing the Server
        Load Balancing the Network
      Using Replication for Local Availability
      Determining Your Replication Strategy
      Example: Load Balancing a Small Site
      Example: Load Balancing a Large Site
      Example: Load Balancing for Local Management
      Example: Load Balancing for Server Traffic
      Example: Replicating for Messaging

Chapter 8 Planning Referrals
    Referral Overview
    Smart Referrals
      Smart Referral Usages
      How You Should Use Smart Referrals
    LDAP Client Referral Handling
      Netscape Client Referral Handling

Chapter 9 Directory Design Examples
    A Small Organization
    A State Government
    An International Corporation
      Single Suffix, Global Directory Tree Replication
      Single Suffix, Local Data Management
      Multiple Suffixes, Local Data Management
    Enabling the Extranet

Chapter 10 Extending Your Directory Service
    Building Custom Tools for Data Migration
    Building Custom LDAP Clients
    The LDAP C and Java SDKs
    Writing Server Plug-Ins

Appendix A Quick Start
    A Word of Advice
    Planning Your Suffix Value
    Directory Tree Advice
    DN Advice
    Creating SuiteSpot Settings
    Creating Directory Entries
    For More Information

Index