While OpenDS plugin development was fairly well documented, it has evolved with OpenDJ while available information has not. I will try here to share some of my experience which might help you save some time until the plugin API becomes stable enough to be officially documented.
Liferay is a popular open source portal solution written in J2EE technology. It features abundance of portlets and plug-ins, as well as many integration options for popular access management and identity solutions. Unfortunately, OpenDJ is not found anywhere in the official (or extra official) documentation. No need to worry as the set-up is more or less trouble-free.
Although the integration of OpenDJ with Samba is not explicitly documented, it does exist for OpenDS - which, as we already know, is the same product as OpenDJ. However, what is not covered is the synchronisation for the Samba password attributes with the LDAP password. This is the aspect we would try to cover in this article.
Sun Microsystems merger with Oracle has created a gap not only in the identity market but also in the continuity of the Sun identity offterings. Once a market leader (and for the moment being still is), Sun Java System Directory Server (also known under many other marketing names such as SunONE and iPlanet) has uncertain future as the new pricing model (i.e. it is not getting any cheaper) plants the customers before a situation to look for the alternatives. What Sun tought of being it’s own open source alternative, OpenDS, does not have a very active development and the users keep asking what is the strategy of Oracle for the ex-Sun products as the roadmap has not been updated ever since the merger. Fortunately, a young Norwegian company called ForgeRock has taken on the task of reviving the Sun’s open source offering and fill the gap created by Oracle. One of their products is OpenDJ, a living version of OpenDS.
Although I always had high level of respect for the documentation of the Sun products, I have to say that sometimes it was the root of an issue by not describing it well. Namely, it’s retro changelog plug-in has a feature of logging a set of attributes for the deleted entry, but it does not really explain anything more then just how to enable it. How to use it on the other hand came up as an issue for our developers…
Fractional replication could be useful if you want to expose only a small set of the attributes to the wider audience. Apart from that it can significantly cut down the size of the database which makes it easier to fit in the memory of the 32-bit systems.
This article uses the existing supplier-consumer setup as a basis and converts it to the fractional replication mode. In the article which describes the supplier-consumer setup you would find the detailed explanation for the replication agreement attribute values to which we refer in this article under signs < and >.
Although I have published an article with a very similar content it does not cover another common use-case. Namely, I have wrote how to setup a multi-master replication but now I will describe another case which is single-master replication (one supplier and one consumer). This case is very similar to the MMR but simpler.
In case you are to perform an upgrade, a useful thing to have is a CLI way to disable and enable a replication agreement. Here’s how to do it:
dn: cn=AGREEMENT_NAME, cn=replica, cn=SUFFIX, cn=mapping tree, cn=config
changetype: modify
add: ds5AgreementEnable
ds5AgreementEnable: off
ldapmodify -h HOST -p PORT -D rootDN -w password -f disableAgreement.ldif
To enable it:
dn: cn=AGREEMENT_NAME, cn=replica, cn=SUFFIX, cn=mapping tree, cn=config
changetype: modify
replace: ds5AgreementEnable
ds5AgreementEnable: on
ldapmodify -h HOST -p PORT -D rootDN -w password -f disableAgreement.ldif
Two years ago I have started a series of articles regarding manipulating Sun Java System Directory Server 5.2 from the command line. This article continues the series and describes the process of adding a new suffix and database to the installation via LDIF. Pročitaj više…
"What I hear, I forget. What I see, I remember. What I do, I understand."
But, what I screw up, I master.
Poslednji komentari