IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- Organisational unit
An organisational unit can only be created within an organisation and is
intended for further partitioning of the NDS. For example, offices,
departments and project groups can be divided into organisational units.
The organisational unit is an optional item used to improve structuring in
accordance with the number of leaf objects involved.
Leaf objects include, for example, users, groups, printers, servers and data
volumes. It is not possible to create additional objects under leaf objects. The
following leaf objects are used most frequently:
- Netware server
This object represents a Netware server in a network, which must contain
at least one such server. The object is referred to by many other objects
which use the services provided by the server, and is created by the
installation program.
- printer
This object represents a printer present in the network, and is always
accompanied by the printer queue and print server objects.
- Users
This object is intended to manage and store information on network users,
particularly their rights to access network resources.
- Groups
Although several users can be assigned to a group, it represents a leaf
object, not a container object. It is intended to simplify administration, as
the rights of a group can be transferred to its members.
- Volume
This object represents a physical volume for storing data. As a rule, volume
objects are created by the installation program.
A detailed description of the remaining leaf objects is provided in Netware
manuals. There are no restrictions on the number of objects, as objects can be
added or deleted by applications.
As already mentioned, the directory objects and their attributes are managed in
a database which constitutes an essential element of the NDS. In networks
possessing WAN links, it is advisable to partition this database into logical
segments which are then copied to various Netware servers. When planning
the replications, it is important to take slow WAN links into account.
This logical segmentation is termed partitioning. The process of copying
logical segments to Netware servers is termed replication.
Every partition consists of at least one container object and any additional
objects contained therein. Additionally, several read or read/write copies of a
partition, but only one master partition, can exist.
The physical partitioning of the NDS is transparent for users, i.e. internal
Netware mechanisms ensure that this partitioning is not noticed by the users.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000