By Rashid Khan Lesson 6-Building a Directory Service.
-
Upload
clara-farmer -
Category
Documents
-
view
216 -
download
0
Transcript of By Rashid Khan Lesson 6-Building a Directory Service.
by Rashid Khan
Lesson 6-Building a Directory ServiceLesson 6-Building a Directory Service
by Rashid Khan
OverviewOverview• Understand Novell Directory
Services.• Describe Windows 2000 Active
Directory.• Understand the network’s
directories.
by Rashid Khan
Understand Novell DirectoryUnderstand Novell DirectoryServices Services
• The Novell Directory Services (NDS) is an integral database component of Novell NetWare.
• The NDS works along with components like the
NetWare Administrator (NWAdmin) and ConsoleOne to manage the Novell network.
• The NDS stores information about users, groups, and resources in a database called Directory.
by Rashid Khan
• The NDS manages and organizes the network’s resources, and assigns attributes to each of the objects such as users, groups, and servers.
• NDS organizes data about every object and verifies their assigned access rights to control objects availability to a user.
Understand Novell DirectoryUnderstand Novell DirectoryServices Services
by Rashid Khan
• It also contains information about the location, characteristics, and authorized users for every resource on a NetWare network.
• The default location for storing items for general use, when logging in to the network, is the public drive (Z:).
Understand Novell DirectoryUnderstand Novell DirectoryServices Services
by Rashid Khan
• NDS structure.• Object naming.
Understand Novell DirectoryUnderstand Novell DirectoryServices Services
by Rashid Khan
NDS Structure NDS Structure • NDS provides NetWare the ability to create
a unified network with a single point for accessing and administering access to networked objects.
• Every resource on the NDS must be provided with a unique identifier for it to locate any object.
• The NDS maintains information about each resource as well as the service provided by it on the network.
by Rashid Khan
NDS Structure NDS Structure • The information is separated into
descriptive categories, called properties of the object and the values.
• The NDS structure is similar to the Microsoft DOS structure.
by Rashid Khan
NDS Structure NDS Structure • Objects• Properties• Values
by Rashid Khan
Objects Objects • The [Root] object, the container
object, and the leaf object are the types of NDS objects.
• NDS objects help organize objects in the NDS tree into logical groupings.
• Logical grouping enables a user to create one login procedure and assign the same to a larger number of objects.
by Rashid Khan
Objects Objects [Root] object:
– The [Root] object is the highest object in a network’s organization.
– It is a special object, and can be created only during the original network software installation.
– A NDS Directory can have only one [Root] object.
by Rashid Khan
Objects Objects [Root] object (continued):
– The [Root] object cannot be moved, renamed, or deleted, and it has no properties.
– The [Root] object can have trustees and rights on other objects.
– It should hold one or more Country objects, Alias objects, or the Organization objects.
by Rashid Khan
Objects Objects
Container object:
– Container objects are special storage locations,
where objects are placed for administrative
purposes.
– The container helps group resource objects for
access or assigning rights.
by Rashid Khan
Container object (continued):– A container object is referred to as a
parent object if it contains other objects.– Country object, Organization object, and
Organizational Unit object are the three special container objects.
Objects Objects
by Rashid Khan
Objects Objects Container object (continued):
– Country (C) object - It holds a valid two-character country abbreviation, and exists directly below the [Root] object.
– Organizational Unit (OU) object – It is placed below the Organization container object, and helps organize the lower levels of an organization.
by Rashid Khan
Objects Objects Container object (continued):
– Each Directory tree must have at least one Organization (O) container object.
– The Organization (O) container object contains the leaf object and the Alias object.
– Organization container objects cannot contain additional Organization container objects.
by Rashid Khan
Objects Objects Leaf object:
– A network’s lowest-level resources and services are referred to as leaf objects.
– A leaf object represents an individual resource or service available on the network.
by Rashid Khan
Properties Properties • The different properties associated
with an object determine the class of that object.
• NDS determines the properties that each object should possess.
by Rashid Khan
Values Values • The pieces of information within the
property fields that describe an object make up the property values of the object.
• Some properties can have their value-required entries for all objects.
by Rashid Khan
Object NamingObject Naming• Network directories consist of multiple
containers, representing numerous combinations of objects based upon their function, geographical location or description.
• Storing objects in multiple containers provides better efficiency and easy administration.
• The NDS provides a single name for every object in the Directory tree.
by Rashid Khan
Object NamingObject Naming• The single name is called an object’s
common name (CN), and the letters CN are called the attribute type abbreviation.
• Users requiring access to network data must make a request to the NDS, which requires a user to provide the correct object name.
by Rashid Khan
Object Naming Object Naming • When NDS receives the request, the
server controlling that object checks its own copy of the Directory to determine whether the user object is valid.
• The NDS locates the requested object and verifies that the user has the permission to perform the required action on that object.
by Rashid Khan
Object Naming Object Naming • NDS objects can have the same common
name.• Identically named objects cannot be
located in the same NDS container, and hence should be stored in different portions of the directory.
• In order to identify such commonly named objects on the NDS tree, it is also essential to know the location of an object.
by Rashid Khan
Object Naming Object Naming • A context specifies an object’s exact
location on the NDS tree.• The context can also be considered
as the name of the parent container of the object.
• A context is a list of all container objects leading from an object to the [Root] object.
by Rashid Khan
Object Naming Object Naming • The current working location of an
object is referred to as the object’s current context.
• The current context is also called the name context.
• The current context is the default container where NDS looks for a resource.
by Rashid Khan
Object Naming Object Naming • Distinguished names.• Typeful names.
by Rashid Khan
Distinguished Names Distinguished Names • An object can also be identified by
providing the exact full context.• The full context is referred to as an
object’s distinguished name.• A distinguished name starts with the
object in question, and identifies each of the container objects in the path to that object.
by Rashid Khan
Distinguished Names Distinguished Names • A distinguished name always begins
with a period.• Periods should also to be used
between each object’s name, and for each successive container object going up the NDS tree.
• Trailing periods are not allowed in distinguished names.
by Rashid Khan
Distinguished Names Distinguished Names Relative distinguished names:
– A relative distinguished name is used to determine the location of an object relative to the current context.
– By default, common names are relative distinguished names.
by Rashid Khan
Relative distinguished names (continued):– Any name that starts without a period is
considered to be a relative distinguished name.
– A trailing period can be used to move up one level in the Directory tree.
Distinguished Names Distinguished Names
by Rashid Khan
Typeful Names Typeful Names
• The ‘CN=’ notation is used with common names to create typeful
names.
• Typeful names help NDS specify an object’s location, thereby
providing faster access.
• Typeful names inform NDS of the different container types and
leaf objects being used, and are used in both distinguished and
relative distinguished names.
• Typeful names are optional.
by Rashid Khan
Typeful Names Typeful Names Typeless names:
– Typeless names provide users the option of leaving the attribute type abbreviations off their entries.
– Typeless names do not include any of the object’s attribute types.
by Rashid Khan
Describe Windows 2000 ActiveDescribe Windows 2000 ActiveDirectoryDirectory
• Active Directory structure.• Installing Active Directory.
by Rashid Khan
Active Directory Structure Active Directory Structure • An Active Directory (AD) allows a user to
access and manage networks from a single login.
• The AD uses a database, which is known as the schema, to keep track of and provide access to all the resources on a network.
• The AD locates network resource objects by their distinct names and potential attributes.
by Rashid Khan
Active Directory Structure Active Directory Structure • Active Directory schema.• Containers.
by Rashid Khan
Active Directory Schema Active Directory Schema • The schema contains a list of the
objects that can be contained in the AD, and the information that can be stored about each object.
• The schema, also called the metadata, is further broken down into the schema class objects and the schema attribute objects.
by Rashid Khan
Active Directory Schema Active Directory Schema • ‘User’ is the default schema class
object included in networks, and it consists of schema attributes such as user logon name, first name, last name, etc.
• The schema divides the database into smaller units to speed up data access and retrieval.
by Rashid Khan
Containers Containers • Container objects are used for
organizing the Active Directory.• Containers help group network
resource objects in a hierarchical parent/child relationship.
• Forest is the largest container object.
by Rashid Khan
Containers Containers Forest object:
– A forest joins multiple domain trees to allow communication or share networked resources with other related trees.
– Trees in a forest share information by using a global catalog.
– Each tree is an independent entity, and can be completely self-administered using its own naming conventions.
by Rashid Khan
Containers Containers Forest object (continued):
– The forest is considered as the boundary of the AD.
– All domain controllers within a forest share the same schema, configuration, and global catalog.
– A forest can contain a single domain and a single tree.
by Rashid Khan
Containers Containers
Tree object:
– The term ‘tree’ is used to indicate a container object
containing multiple domains.
– Each domain is a distinct unit, and joins the tree to
communicate and share its networked resources with other
domains.
– Each domain in a tree is an independent entity and can be
completely self-administered using its own naming convention.
by Rashid Khan
Containers Containers
Domain object:
– Domain is the most important container object in
Microsoft’s hierarchical directory services structure as all
AD objects are part of a domain.
– Each domain is capable of controlling the security and
access to each of the objects.
by Rashid Khan
Domain object (continued):– A domain is controlled by a single server
called the domain controller. – Domains can span a wide physical or
geographical area when it is based on the logical relationships within a company.
Containers Containers
by Rashid Khan
Containers Containers Organizational Unit (OU) object:
– The OU container helps structure the network to imitate the actual internal organization.
– An OU is used to compartmentalize objects so that they can be effectively administered and access to networked resources can better be controlled.
by Rashid Khan
Installing Active Directory Installing Active Directory
Windows 2000 Configure Your Server window
by Rashid Khan
Installing Active Directory Installing Active Directory The user needs to select the following
options:– Domain Controller for a New Domain
option in the Domain Controller Type window.
– Create a New Domain Tree option n the Create Tree or Child Domain window.
– Create a New Forest of Domain Trees option in the Create or Join Forest window.
by Rashid Khan
Installing Active Directory Installing Active Directory
New Domain Name window
by Rashid Khan
Installing Active Directory Installing Active Directory The user needs to select the following
options (continued):– The Yes, Install and Configure DNS on
the Computer option in the Configure DNS window.
– The Permissions Compatible with Pre-Windows 2000 Servers option in the Permissions window.
by Rashid Khan
Understand the Network’sUnderstand the Network’sDirectories Directories
• Administering the NetWare 6 server.• Creating NetWare users.• Creating NDS objects.• Administering the Windows 2000
Server.• Creating AD objects.
by Rashid Khan
Administering the NetWare Administering the NetWare 6 Server 6 Server
• NDS provides a global database that gives network administrators centralized access to networked information, resources, and services.
• It logically organizes the network resources independent of the physical network configuration, and also dynamically maps an object and its actual physical resource.
by Rashid Khan
Administering the NetWare Administering the NetWare 6 Server 6 Server
• The NDS Directory provides administrators with manageable groupings of objects, thereby providing greater security for the networked resources.
• The Directory is stored on numerous servers, thereby providing fault tolerance.
by Rashid Khan
Creating NetWare Users Creating NetWare Users • Creating users and organizing them
into hierarchical containers makes it easier for an administrator to maintain the network.
• It is also easier for the user to work with networked resources.
by Rashid Khan
Creating NDS Objects Creating NDS Objects
Organizational Unit dialog
box
by Rashid Khan
Creating NDS Objects Creating NDS Objects
New Group dialog box
by Rashid Khan
Creating NDS Objects Creating NDS Objects
New User button
by Rashid Khan
Creating NDS Objects Creating NDS Objects
New User window
by Rashid Khan
Creating NDS Objects Creating NDS Objects
New User-Properties
window
by Rashid Khan
Creating NDS Objects Creating NDS Objects
Select Objects dialog box
by Rashid Khan
Administering the Windows 2000Administering the Windows 2000Server Server
• The AD provides network administrators with a global database for managing the networked information, resources, and services.
• It also logically organizes networked resources independent of the physical location.
• Users and other networked objects are managed from the server’s console or through remote administration capabilities.
by Rashid Khan
• Appropriate permissions can be set on the Administrative Tools and the consoles to administer the AD and the server respectively.
• A copy of AD is kept on all domain controllers to restore them easily in case of a server failure.
Administering the Windows Administering the Windows 20002000
Server Server
by Rashid Khan
Creating AD Objects Creating AD Objects
Computer Name
Change dialog box
by Rashid Khan
Creating AD Objects Creating AD Objects
Active Directory Users and Computers
by Rashid Khan
Creating AD Objects Creating AD Objects
Creating a New User
by Rashid Khan
Creating AD Objects Creating AD Objects
New Object-User window
by Rashid Khan
Creating AD Objects Creating AD Objects
Password settings
by Rashid Khan
Summary Summary • Novell Directory Services (NDS) and
NWAdmin help manage the Novell network.
• NDS tracks objects by storing information in the form of properties and values.
• [Root], container, and leaf objects are the three NDS object types.
by Rashid Khan
Summary Summary • An object’s name without a reference
to its position in a network is called its common name (CN).
• An Active Directory is a database that keeps track of and provides access to all the networked resources.
• The NWAdmin or ConsoleOne can be used to create NDS objects.