Overview of Sun ONE Directory Server Integration
You can integrate the Sun ONE Directory Server product into your SDX environment by installing an SDX add-on package and then installing Sun ONE Directory Server as specified in this chapter. Sun ONE Directory Server is based on industry-standard LDAP and provides advanced security features, carrier-grade scalability, performance, and availability. Sun ONE acts as a central repository for the consolidation of subscriber profiles.
You can use the information stored in Sun ONE Directory Server for the authentication and authorization of subscribers to enable secure access to enterprise and Internet services. Sun ONE helps to ensure that appropriate access control policies are enforced across all communities, applications, and services on a global basis.
About the Sun ONE Add-On Package
The Sun ONE Directory Server add-on package for the SDX software is called UMCiDSa. This package provides:
- The file sdx.inf, which integrates with Sun ONE's silent installation feature
- A load script and files in LDAP Data Interchange Format (LDIF) to integrate Sun ONE Directory Server with the SDX software
The /opt/UMC/conf/iDS directory contains these files.
Silent Installation for Sun ONE Directory Server
Sun ONE's silent installation feature allows Sun ONE software to be embedded with the SDX software through the sdx.inf file. No user intervention is required during the setup process. Table 7 describes important setup script information provided in the sdx.inf file.
Server identifier (Sun ONE specific). The directory instance is installed in the path:
SDX Load Script to Integrate Sun ONE Directory Server
The load script performs the following tasks:
Because the Merit AAA Server (RADIUS) requires that passwords be stored as clear text, the load script changes a setting to not store the password in an encrypted manner.
- Add SDX schema requirements
- Index SDX attributes
- Create the directory infrastructure for SDX entries
- Load access control information
Sun One Directory Server stores the access control information in the aci attribute, which is available for all directory entries. The load script processes the access.ldif file to add required access control information.