eTrust Directory Administrator Guide - CA Technologies

Preventing Users from Re-using Passwords ................................................. 6-32
Some Password Controls Require an LDAP Client ........................................... 6-32
Example Password Policy ................................................................. 6-33
Access Control Overview ..................................................................... 6-34
Access Control Policies.................................................................... 6-34
Access Control Rules...................................................................... 6-35
Designing Your Access Control Scheme .................................................... 6-35
Working with Access Controls ............................................................. 6-37
Static Access Controls......................................................................... 6-38
Overview of Static Access Control Rules .................................................... 6-38
Setting Up Static Access Controls .......................................................... 6-40
Defining Superusers ...................................................................... 6-42
Defining Administrative Users............................................................. 6-43
Defining Registered Users ................................................................. 6-45
Defining Public Users ..................................................................... 6-47
Protecting Items .......................................................................... 6-48
Dynamic Access Controls ..................................................................... 6-51
Enabling and Disabling Dynamic Access Controls ........................................... 6-51
Dynamic Access Control Rules............................................................. 6-52
Groups, Roles, and Proxies .................................................................... 6-53
Defining Groups of Users ................................................................. 6-53
Role-Based Access Controls ............................................................... 6-54
Secure Proxies............................................................................ 6-56
Access Controls and Aliases ............................................................... 6-57
Access-Controlled Routing .................................................................... 6-58
Chapter 7: Replication
Replication Concepts .......................................................................... 7-2
Compare Distribution and Replication....................................................... 7-2
Compare Multimaster and Master–Slave Replication.......................................... 7-2
Compare Real-Time and Write-Behind Replication ........................................... 7-3
Compare Replay-Based and State-Based Replication .......................................... 7-3
Three Types of Replication Used with eTrust Directory ....................................... 7-4
Keep System Clocks Synchronized .......................................................... 7-4
Multiwrite Replication ......................................................................... 7-5
How Multiwrite Replication Works ......................................................... 7-5
Multiwrite Can Work Asynchronously ...................................................... 7-6
How Multiwrite Groups Work .............................................................. 7-7
Set Up a Multiwrite System................................................................ 7-10
Recovering a Multiwrite System Using Queues .............................................. 7-12
viii
eTrust Directory Administrator Guide