These release notes contain important information available at the release of Red Hat Directory Server
version 9.0. New features, system requirements, installation notes, known problems, resources, and
other current issues are addressed here. Read this document before beginning to use Directory Server
9.0.
1. New in Red Hat Directory Server 9.0
Directory Server 9.0 has introduced many features to make managing the directory service and its data
easier.
1.1. New: Renaming Subtrees and Moving to a New Parent
Every distinguished name is comprised of a series of name elements that indicate the place of the entry
within the directory tree. The far left element, the relative DN or RDN, is the entry's own name. T he other
elements identify the ancestors of the entry.
In previous releases of Directory Server, it was possible to rename leaf or terminal entries; that is,
entries without children. T his is a modrdn operation. However, it was not possible to rename a parent
entry, which would subsequently end up "moving" all its children in the directory tree. Directory Server
9.0 introduces subtree rename operations. This allows parent entries to be renamed through a modrdn
operation, and all their children are subsequently updated to maintain the directory structure. Subtree
renames can also be disabled to prevent changing the directory tree.
Additionally, Directory Server now supports moving a leaf entry to a new parent, a moddn operation with
a new superior.
With the combination of subtree rename and moddn with a new superior, Directory Server provides full
support of the modify DN operations specified in RFC 4511.
For more information on subtree rename operations, see the 9.0 Administrator's Guide.
1.2. New: Introducing the Managed Entries Plug-in to Create Pairs of Entries
There are situations when one entry is created and there should automatically be a corresponding
second entry with related attribute values. For example, when a Posix user is created, a corresponding
Posix group entry should also be created.
The Managed Entries Plug-in identifies an origin entry target. When an entry is created in that scope,
matching the given attributes, it automatically generates a new, managed entry.
For more information on the Managed Entries Plug-in, see the 9.0 Administrator's Guide.
1.3. New: Introducing the Account Policy Plug-in to Define Time-Based Account
Inactivation
Account policies can already be set based on failed password attempts or by an administrator manually.
The new Account Policy Plug-in in Directory Server 9.0 allows administrators to set time-based account
lockout policies.
The Account Policy Plug-in can configure natural timeout periods for accounts based on activity
(assessed by the last login time) or by the account age (based on the account creation time).
For more information on the Account Policy Plug-in, see the 9.0 Administrator's Guide.
Kommentare zu diesen Handbüchern