Administering Directory Server

 

Use this information to manage the Directory Server.

To administer the Directory Server, the user profile you are using must have the following authority:

• To configure the server or change the server configuration: All Object (*ALLOBJ) and I/O System Configuration (*IOSYSCFG) special authorities

• To start or stop the server: Job Control (*JOBCTL) authority and object authority to the End TCP/IP (ENDTCP), Start TCP/IP (STRTCP), Start TCP/IP Server (STRTCPSVR), and End TCP/IP Server (ENDTCPSVR) commands

• To set auditing behavior for the directory server: Audit (*AUDIT) special authority

• To view the server job log: Spool Control (*SPLCTL) special authority

To manage directory objects (including access control lists, object ownership, and replicas), connect to the directory with either the administrator DN or another DN that has the proper LDAP authority. If authority integration is being used, an administrator can also be a projected user (see Operating system projected backend) that has authority to the Directory Server Administrator function ID. Most administrative tasks can also be performed by users in the administrative group (see Administrative access).

• General administration tasks
  Use this information to manage general administration of the Directory Server.

• Administrative group tasks
  Use this information to manage administrative groups.

• Search limit group tasks
  Use this information to manage search limit groups.

• Proxy authorization group tasks
  Use this information to manage proxy authorization groups.

• Unique attribute tasks
  Use this information to manage unique attributes.

• Performance tasks
  Use this information to adjust performance settings.

• Replication tasks
  Use this information to manage replication.

• Topology tasks
  Use this information to manage topologies of replicated subtrees.

• Security property tasks
  Use this information to manage security property tasks.

• Schema tasks
  Use this information to manage the schema.

• Directory entry tasks
  Use this information to manage directory entries.

• User and group tasks
  Use this information to manage users and groups.

• Realm and user template tasks
  Use this information to manage realms and user templates.

• Access control list (ACL) tasks
  Use this information to manage access control lists (ACLs).

 

Parent topic:

IBM Directory Server for iSeries (LDAP)