389 Directory Server

389 Directory Server (formerly Fedora Directory Server ) is a free LDAP server. It is a further development of the Netscape Directory Server, an LDAP server, which the company Red Hat in 2004 bought by AOL. Previously, the software was owned by the company Netscape Communications. Since the start at the University of Michigan in 1996, the software has been constantly evolving. 389 Directory Server is available as free software under the GNU General Public License.

Functionality and features

389 Directory Server supports:

  • Multi- master replication
  • Active Directory balance
  • Secure authentication systems (SSL / TLS and SASL )
  • LDAP Version 3
  • Permissions (ACI = Access Control Information )
  • Roll

As of version 1.1:

  • Automatic user and group number generator (UID / GID number generator )
  • LDAP direct ( LDAPI )

The project

Red Hat pursuing this project, a similar strategy as in Fedora, the well-known Linux distribution. There are areas placed under the GPL 389/Fedora Directory Server and the commercial support under Red Hat Directory Server. The two products differ mainly by a slightly simpler installation and the professional support of the commercial variant. Red Hat provides as RHEL his guidance texts for all freely available on the website, as it can be transferred to the Fedora version almost completely.

For the entire previous Netscape Enterprise Suite included an email, an application and a calendar server. These have not been released until now. 2005 Red Hat announced to want to open additional products. Whether this happens for example for the application server, is uncertain: Red Hat wildfly support and Sun Microsystems developed it already under the GlassFish project. The certification service is run with the Dogtag Certificate System 's own project.

Versions

The first release 7.1 (version number nor the Netscape time ago) formed the basis for the Red Hat Directory Server 7

After the first completely open version 1.0.0, which ran only with time limit (120 days), versions 1.0.1 to 1.0.4 were smaller bug fixes and improvements (eg more supported password encryption techniques ) issued. They fit to each of the newly released Fedora and Red Hat Enterprise Linux operating systems, and grabbed her for it.

From 2007, with version 1.1, the installation packages are only available through the Fedora Extra repository or a separate Directory Server repository via YUM. The now completed version 1.1 includes:

  • Careful selection of components to install by multiple packages
  • FHS locations in the system
  • Improved installation
  • Easy migration from 1.0.x
  • Init scripts
  • Improvements in interoperability with Samba (especially version 4)
  • Bug fixes in the console and removing old components of the admin server

There are Fedora 6 to 10 and RHEL 5 supports as platforms from Service Level 1. In parallel, there is now the Red Hat Directory Server 8

Compatibility / Interoperability

From a branch of the project was created in 2001 which is also popular Sun Java System Directory Server from the former iPlanet alliance between Netscape and Sun. Thus, both the Fedora and the Sun server, as well as older Netscape servers variants work together to a certain extent (such as replication ). Since Sun is planning, however, with that of the OpenDS project to replace its directory service offered, this is possibly no longer exists.

For Active Directory and NT4 Microsoft synchronization of the user data is supported.

By slurpd replication of data from OpenLDAP is supported ( only in one direction). Thus, the FDS serve as a read-only copy of the directory. Conversely, however, turn in one direction only, it should also be possible in theory, the approach has not yet been documented.

As of version 1.1, the full integration will be sought with the future Samba 4.

Unlike Novell eDirectory: there are (except the LDAP protocol ) yet no interoperability.

Red Hat itself aims to complete integration into his new administration platform FreeIPA ( identities, policies, monitoring).

13893
de