Red Hat NETSCAPE DIRECTORY SERVER 7.0 - DEPLOYMENT Manuale di Servizio

Installation and Tuning GuideSun™ ONE Directory ServerVersion5.2816-6697-10June 2003

Typographical Conventions10 Sun ONE Directory Server Installation and Tuning Guide • June 2003Typographical ConventionsThis section explains the typog

Keeping Accurate Time100 Sun ONE Directory Server Installation and Tuning Guide • June 2003Disabling Unnecessary ServicesFor top performance and less

Generating Basic Tuning RecommendationsChapter 5 Tuning the Operating System 101(Solaris Packages) As part of the installation and configuration proce

Tuning System Settings102 Sun ONE Directory Server Installation and Tuning Guide • June 2003Tuning System SettingsYou may use the idsktune tool that r

Tuning System SettingsChapter 5 Tuning the Operating System 103File DescriptorsDirectoryServerusesfiledescriptorswhen handlingconcurrentclient connect

Tuning System Settings104 Sun ONE Directory Server Installation and Tuning Guide • June 2003Transmission Control Protocol (TCP) SettingsSpecific netwo

Tuning System SettingsChapter 5 Tuning the Operating System 105Inactive ConnectionsSome systems allow you to configure the interval between transmissi

Tuning System Settings106 Sun ONE Directory Server Installation and Tuning Guide • June 2003Retransmission TimeoutSome systems allow you to configure

107Chapter 6Tuning Cache SizesDirectory Server caches directory information in memory and on disk in order tobe able to respond more quickly to client

Types of Cache108 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 6-1 shows caches foran instance of Directory Server handlin

Types of CacheChapter 6 Tuning Cache Sizes 109Directory Server moves pages between the database files and the databasecache tomaintain maximum databas

Default Paths and FilenamesAbout This Guide 11Directory Server instances are located under ServerRoot/slapd-serverID/,whereserverID represents the ser

Types of Cache110 Sun ONE Directory Server Installation and Tuning Guide • June 2003Actual memory used by the Directory Server process depends primari

Types of CacheChapter 6 Tuning Cache Sizes 111File System CacheThe operating system allocates available memory not used by Directory Servercaches and

How Searches Use Cache112 Sun ONE Directory Server Installation and Tuning Guide • June 2003Ifall suffix initializationtakesplaceofflinewith Directory

How Searches Use CacheChapter 6 Tuning Cache Sizes 113Figure 6-2 Searches and CacheBase Search ProcessAs shown, base searches (those specifying a base

How Searches Use Cache114 Sun ONE Directory Server Installation and Tuning Guide • June 20031. Attempts to retrieve the entry having the specified bas

How Updates Use CacheChapter 6 Tuning Cache Sizes 115How Updates Use CacheFigure 6-3 illustrates how Directory Server handles updates. Individual line

How Suffix Initialization Uses Cache116 Sun ONE Directory Server Installation and Tuning Guide • June 2003Updates involve more processing than searche

How Suffix Initialization Uses CacheChapter 6 Tuning Cache Sizes 117Figure 6-4 Suffix Initialization (Bulk Loading) and CacheTo initialize a suffix, D

Optimizing For Searches118 Sun ONE Directory Server Installation and Tuning Guide • June 20033. Reads from and writes to the database files when impor

Optimizing For SearchesChapter 6 Tuning Cache Sizes 119Figure 6-5 Monitoring Cache Hit Rate Using Directory Server ConsoleAlternatively, paging and ca

Downloading Directory Server Tools12 Sun ONE Directory Server Installation and Tuning Guide • June 2003Downloading Directory Server ToolsSome supporte

Optimizing For Searches120 Sun ONE Directory Server Installation and Tuning Guide • June 2003As a rough estimate of the number of entry cache slots an

Optimizing for UpdatesChapter 6 Tuning Cache Sizes 121Alternatively, if search patterns are less random,you may choose to set entry anddatabase caches

Cache Priming and Monitoring122 Sun ONE Directory Server Installation and Tuning Guide • June 2003Cache Priming and MonitoringPrimingcaches means fill

Other OptimizationsChapter 6 Tuning Cache Sizes 123$ ldapsearch -D admin -w password \-b cn=monitor,cn=database_name,cn=ldbm\ database,cn=plugins,cn=c

Other Optimizations124 Sun ONE Directory Server Installation and Tuning Guide • June 2003

125Chapter 7Tuning IndexingAs Directory Server handles more and more entries, searches potentially consumemore and more time and system resources. Ind

Benefits: How Searches Use Indexes126 Sun ONE Directory Server Installation and Tuning Guide • June 2003An index file for a particular attribute such

Costs: How Updates Affect IndexesChapter 7 Tuning Indexing 1272. Directory Server examines therequestto ensure the search base correspondstoa suffix i

Costs: How Updates Affect Indexes128 Sun ONE Directory Server Installation and Tuning Guide • June 2003In general, tuning indexing for an instance of

Costs: How Updates Affect IndexesChapter 7 Tuning Indexing 129Equality IndexesFigure 7-2 depicts an equality index for the SN (surname) attribute. It

Suggested ReadingAbout This Guide 13• Sun ONE Directory Server Reference Manual- Details the Directory Serverconfiguration parameters,commands, files,

Costs: How Updates Affect Indexes130 Sun ONE Directory Server Installation and Tuning Guide • June 2003The cost of equalityindexes is generally lower

Costs: How Updates Affect IndexesChapter 7 Tuning Indexing 131Directory Serveroffers a further optimization allowing initial substring searches ofonly

Costs: How Updates Affect Indexes132 Sun ONE Directory Server Installation and Tuning Guide • June 2003When Directory Server receives an update reques

Costs: How Updates Affect IndexesChapter 7 Tuning Indexing 133In adding this entry, Directory Server must modify indexes for cn, sn, mail,telephoneNum

Tuning Indexing for Performance134 Sun ONE Directory Server Installation and Tuning Guide • June 2003Tuning Indexing for PerformanceIn many cases, tun

Tuning Indexing for PerformanceChapter 7 Tuning Indexing 135$ ldapmodify -h host -p port -D "cn=directory manager" -w passworddn: cn=example

Tuning Indexing for Performance136 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 7-5 Reaching the All IDs Threshold for an

Tuning Indexing for PerformanceChapter 7 Tuning Indexing 137The notes=U flag at the end of an access log RESULT message indicates DirectoryServer perf

Tuning Indexing for Performance138 Sun ONE Directory Server Installation and Tuning Guide • June 20035. If database cache size was tuned for the old a

139Chapter 8Tuning LoggingDirectory Server provides several log types, summarized in Table 8-1.This chapterdiscusses how to handle the different types

Suggested Reading14 Sun ONE Directory Server Installation and Tuning Guide • June 2003

Access Logging140 Sun ONE Directory Server Installation and Tuning Guide • June 2003Access LoggingThe access log contains detailed information about c

Access LoggingChapter 8 Tuning Logging 141Refer to the Sun ONE Directory Server Reference Manual for details concerningindividual configuration attrib

Audit Logging142 Sun ONE Directory Server Installation and Tuning Guide • June 2003Audit LoggingThe audit log contains detailed information about all

Error LoggingChapter 8 Tuning Logging 143Refer to the Sun ONE Directory Server Reference Manual for details concerningindividual configuration attribu

Error Logging144 Sun ONE Directory Server Installation and Tuning Guide • June 2003Table 8-4 Tuning Recommendations for Error LoggingConfiguration Att

Multi-Master Replication Change LoggingChapter 8 Tuning Logging 145Refer to the Sun ONE Directory Server Reference Manual for details concerningindivi

Retro Change Logging146 Sun ONE Directory Server Installation and Tuning Guide • June 2003Refer to the Sun ONE Directory Server Reference Manual for d

Transaction LoggingChapter 8 Tuning Logging 147Refer to the Sun ONE Directory Server Reference Manual for details concerningindividual configuration a

Transaction Logging148 Sun ONE Directory Server Installation and Tuning Guide • June 2003Refer to the Sun ONE Directory Server Reference Manual for de

149Chapter 9Managing Use of Other ResourcesAfter optimizing cache size, attribute value indexing, and log management, it mayprove useful totune how Di

15Part 1InstallationChapter 1, “Installing Sun ONE Directory Server”Chapter 2, “Upgrading From Previous Versions”Appendix A, “Installed Product Layout

Limiting Resources Available to Clients150 Sun ONE Directory Server Installation and Tuning Guide • June 2003Table 9-1 Tuning Recommendations for Limi

Limiting Resources Available to ClientsChapter 9 Managing Use of Other Resources 151dn: cn=confignsslapd-maxbersizeSets the maximum size in bytes for

Using Available System Resources152 Sun ONE Directory Server Installation and Tuning Guide • June 2003Refer to the Sun ONE Directory Server Reference

Using Available System ResourcesChapter 9 Managing Use of Other Resources 153nsslapd-maxdescriptors Sets the maximum number of file descriptors Direct

Using Available System Resources154 Sun ONE Directory Server Installation and Tuning Guide • June 2003nsslapd-reservedescriptors Sets the number of fi

Using Available System ResourcesChapter 9 Managing Use of Other Resources 155Refer to the Sun ONE Directory Server Reference Manual for details concer

Using Available System Resources156 Sun ONE Directory Server Installation and Tuning Guide • June 2003resource targeted for the resulting operation. I

Using Available System ResourcesChapter 9 Managing Use of Other Resources 157Refer to the Sun ONE Directory Server Reference Manual for details concer

Using Available System Resources158 Sun ONE Directory Server Installation and Tuning Guide • June 2003

159Appendix AInstalled Product LayoutThis appendix summarizes product software layout after a typical installation. Ofthe files installed, only those

16 Sun ONE Directory Server Installation and Tuning Guide • June 2003

The ServerRoot Directory160 Sun ONE Directory Server Installation and Tuning Guide • June 2003The ServerRoot/bin directory contains product binaries a

The ServerRoot DirectoryAppendix A Installed Product Layout 161The ServerRoot/plugins directory contains sample server plug-ins, header files forplug-

The Server Instance Directory162 Sun ONE Directory Server Installation and Tuning Guide • June 2003The ServerRoot/setup5 directory contains sample tem

The Server Instance DirectoryAppendix A Installed Product Layout 163Subdirectories of ServerRoot/slapd-ServerID contain configuration, log, andbackup

Internal Use Only164 Sun ONE Directory Server Installation and Tuning Guide • June 2003Manage your server instance using the tools provided. Do not mo

165Appendix BUsing the Sun Crypto AcceleratorBoardThis appendix provides instructions on using a Sun Crypto Accelerator boardwithDirectory Server to e

Creating a Token166 Sun ONE Directory Server Installation and Tuning Guide • June 2003Refer to Sun ONE Server Console Server Management Guide both for

Generating Bindings for the BoardAppendix B Using the Sun Crypto Accelerator Board 167secadm> set realm=dsrealmsecadm{dsrealm}> suSystem Adminis

Importing Certificates168 Sun ONE Directory Server Installation and Tuning Guide • June 20035. Make the external security module the default for RSA,

Configuring SSLAppendix B Using the Sun Crypto Accelerator Board 1691. Create a file, ssl.ldif, of modifications to change SSL related DirectoryServer

17Chapter 1Installing Sun ONE Directory ServerThis chapter is designed to guide you through initial Sun ONE Directory Serversoftware installation and

Configuring SSL170 Sun ONE Directory Server Installation and Tuning Guide • June 2003$ ldapmodify -p currPort -D "cn=directory manager" -w p

171Appendix CInstalling Sun Cluster HA forDirectory ServerThis appendix describes how to install and configure both the Sun Cluster HA forDirectory Se

Before You Start172 Sun ONE Directory Server Installation and Tuning Guide • June 2003Table C-1 Installation and Configuration ProcessTask What you sh

Setting Up Network ResourcesAppendix C Installing Sun Cluster HA for Directory Server 173Setting Up Network ResourcesSun Cluster software manages logi

Setting Up Network Resources174 Sun ONE Directory Server Installation and Tuning Guide • June 20032. Verify that all network addressesyou use havebeen

Installing the ServersAppendix C Installing Sun Cluster HA for Directory Server 175Installing the ServersIn Sun Cluster HA for Directory Server,both D

Installing the Data Service Packages176 Sun ONE Directory Server Installation and Tuning Guide • June 20031. Install the Solaris packages for both Dir

Configuring the ServersAppendix C Installing Sun Cluster HA for Directory Server 1774. Add the servers to the failover resource group created in “Sett

Example Registration and Configuration178 Sun ONE Directory Server Installation and Tuning Guide • June 2003Example Registration and ConfigurationCode

Configuring Extension PropertiesAppendix C Installing Sun Cluster HA for Directory Server 179What You Can ConfigureYou typically configure resource ex

Before You Start18 Sun ONE Directory Server Installation and Tuning Guide • June 20031. Plan the deployment of directory services.Refer to the Sun ONE

Configuring Extension Properties180 Sun ONE Directory Server Installation and Tuning Guide • June 2003The fault monitor uses the IP addresses and port

Synchronizing HA Storage and Data ServicesAppendix C Installing Sun Cluster HA for Directory Server 181Synchronizing HA Storage and Data ServicesThe S

Uninstalling182 Sun ONE Directory Server Installation and Tuning Guide • June 20033. Add the Directory Server to the failover resource group created i

UninstallingAppendix C Installing Sun Cluster HA for Directory Server 183# scrgadm -r -t SUNW.dsldap# scrgadm -r -t SUNW.mps4.Delete the server config

Uninstalling184 Sun ONE Directory Server Installation and Tuning Guide • June 2003

185IndexAaccess control 155–156access log 140approximate indexes 132auditlog 142Bbrowsing indexes 131Ccachedatabase 108entry 109file system 111import

186 Sun ONE Directory Server Installation and Tuning Guide • June 2003Hhardware sizing. See sizingIidsktune 28, 31, 35, 97,98, 101,102indexes32-bit vs

Index 187nsslapd-db-logdirectory 148nsslapd-directory 89, 125nsslapd-errorlog 88, 144nsslapd-errorlog-logging-enabled 144nsslapd-errorlog-logmaxdisksp

188 Sun ONE Directory Server Installation and Tuning Guide • June 2003troubleshooting 46–49tuningaccess control 155–156blocked connections 150cache 75

InstallationChapter 1 Installing Sun ONE Directory Server 194. Ensure the host system meets at least minimum disk space and memoryrequirements, as sum

Copyright © 2003 Sun Microsystems, Inc., 4150 Network Circle, Santa Clara, California 95054, U.S.A. All rightsreserved.U.S. Government Rights - Commer

Installation20 Sun ONE Directory Server Installation and Tuning Guide • June 2003Determining What to InstallYou have a number of alternatives to evalu

InstallationChapter 1 Installing Sun ONE Directory Server 21• Do you want to install without first becoming super user? Do you want toinstall multiple

Installation22 Sun ONE Directory Server Installation and Tuning Guide • June 2003When providing information for Directory Administratorand Directory M

InstallationChapter 1 Installing Sun ONE Directory Server 23Installing on Solaris SystemsHow you install Directory Server software depends on which pa

Installation24 Sun ONE Directory Server Installation and Tuning Guide • June 2003Performing Interactive Installation Using Solaris PackagesPerform the

InstallationChapter 1 Installing Sun ONE Directory Server 25SUNWdsvpl Sun ONE Directory Server PerLDAP modulesSUNWdsvr Sun ONE Directory Server (Root)

Installation26 Sun ONE Directory Server Installation and Tuning Guide • June 2003It is recommended that you use a writable basedir such as /var when i

InstallationChapter 1 Installing Sun ONE Directory Server 273. Verify that the packages you want are not yet installed.Do not reinstall packages that

Installation28 Sun ONE Directory Server Installation and Tuning Guide • June 20034. Run the following command as super user:root# /usr/sbin/directorys

InstallationChapter 1 Installing Sun ONE Directory Server 29Configuring Administration Server1. Start the configuration program.To use the graphical u

3ContentsAboutThisGuide ...9PurposeofThisGuide ...

Installation30 Sun ONE Directory Server Installation and Tuning Guide • June 20031. Perform Directory Server configuration using the -saveState option

InstallationChapter 1 Installing Sun ONE Directory Server 31root# /usr/sbin/mpsadmserver configure -f admserv-fileHere admserv-file is the silent inst

Installation32 Sun ONE Directory Server Installation and Tuning Guide • June 2003Performing Interactive Installation From a Compressed Archive1. Start

InstallationChapter 1 Installing Sun ONE Directory Server 332. Start the installation program with the -saveState option.root# ./setup -saveState file

Installation34 Sun ONE Directory Server Installation and Tuning Guide • June 20033. (Optional) Enable core file generation.If you have installed Direc

InstallationChapter 1 Installing Sun ONE Directory Server 35Instructions For All UNIX Platforms1. Run the idsktune utility, which you find in the dire

Installation36 Sun ONE Directory Server Installation and Tuning Guide • June 20035. Before installing using a locale other than US English, set the LA

InstallationChapter 1 Installing Sun ONE Directory Server 37Proceed to “Completing the Installation Process,” on page 38.Performing Silent Installatio

Installation38 Sun ONE Directory Server Installation and Tuning Guide • June 2003root# ./setup -noconsole -nodisplay -state filenameHere filename is t

InstallationChapter 1 Installing Sun ONE Directory Server 39Preparing For Installation1. When installing Windows 2000, specify that the computer is a

4 Sun ONE Directory Server Installation and Tuning Guide • June 2003Chapter 2 UpgradingFromPreviousVersions... 51Befo

Installation40 Sun ONE Directory Server Installation and Tuning Guide • June 20031. Log on as a user with Administrator privileges.2. Start the instal

UninstallationChapter 1 Installing Sun ONE Directory Server 41❍ ServerRoot\admin-serv\config\obj.conf❍ ServerRoot\admin-serv\config\secmod.db❍ ServerR

Uninstallation42 Sun ONE Directory Server Installation and Tuning Guide • June 2003• Uninstalling on Other UNIX Systems• Uninstalling on Windows Syste

UninstallationChapter 1 Installing Sun ONE Directory Server 43Unconfiguring Directory Server• Delete the Directory Server configuration.root# /usr/sbi

Uninstallation44 Sun ONE Directory Server Installation and Tuning Guide • June 2003root# /usr/sbin/directoryserver.51bak uninstall -f 51-uninstaller-f

UninstallationChapter 1 Installing Sun ONE Directory Server 45Performing Silent Uninstallation1. Edit uninstall specification file, ServerRoot/setup/u

Troubleshooting46 Sun ONE Directory Server Installation and Tuning Guide • June 2003TroubleshootingTable 1-10 Common Installation Problems With Soluti

TroubleshootingChapter 1 Installing Sun ONE Directory Server 47An LDAP authenticationerrorcauses installation tofail.You may have provided the incorre

Troubleshooting48 Sun ONE Directory Server Installation and Tuning Guide • June 2003I installed the 32-bitversion of the DirectoryServer by mistake.Ho

TroubleshootingChapter 1 Installing Sun ONE Directory Server 49Iwroteascripttohandleinstallation. When I triedinstallingusing my script,the installer

5DiskSubsystemAlternatives... 90MonitoringI/OandDiskUse...

Troubleshooting50 Sun ONE Directory Server Installation and Tuning Guide • June 2003

51Chapter 2Upgrading From Previous VersionsThis chapter covers upgrading to Sun ONE Directory Server 5.2 from NetscapeDirectory Server 4.x, and from i

Before You Upgrade52 Sun ONE Directory Server Installation and Tuning Guide • June 2003Sun ONE Directory Server 5.2 provides a script to help you migr

Before You UpgradeChapter 2 Upgrading From Previous Versions 535. Migrates user-defined schema objects.6. Migrates indexes.7. Migrates standard server

Upgrading a Single Server54 Sun ONE Directory Server Installation and Tuning Guide • June 2003If the existing environment involves multiple, replicate

Upgrading a Single ServerChapter 2 Upgrading From Previous Versions 55Although you may choose to reuse most of the configuration information suppliedf

Upgrading a Single Server56 Sun ONE Directory Server Installation and Tuning Guide • June 20031. If you intend to initialize replication on the new Di

(4.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 57Refer to the Sun ONE Directory Server Administration Guide for i

(4.x to 5.2) Upgrading Replicated Servers58 Sun ONE Directory Server Installation and Tuning Guide • June 20034. Make the new server as a legacy consu

(4.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 591. Proceed according to the instructions under “Upgrading a Sing

6 Sun ONE Directory Server Installation and Tuning Guide • June 2003OptimizingforUpdates...

(4.x to 5.2) Upgrading Replicated Servers60 Sun ONE Directory Server Installation and Tuning Guide • June 2003Example 4.x Upgrade ScenarioConsider an

(4.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 61Figure 2-2 Example 4.x Topology with Additional New ServerFigure

(4.x to 5.2) Upgrading Replicated Servers62 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 2-4 shows the next step in replac

(4.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 63Figure 2-6 Example 4.x Branch During Upgrade - Next BranchFigure

(4.x to 5.2) Upgrading Replicated Servers64 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 2-8 shows the addition of a maste

(4.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 65Figure 2-9 Removing the Replication AgreementAfter redirecting c

(5.x to 5.2) Upgrading Replicated Servers66 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 2-10 Resulting 5.2 TopologyClient

(5.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 67Upgrading 5.x Servers1. For each consumer in the existing topolo

(5.x to 5.2) Upgrading Replicated Servers68 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 2-11 Existing 5.x Topology Exampl

(5.x to 5.2) Upgrading Replicated ServersChapter 2 Upgrading From Previous Versions 69The next step involves upgrading hubs. Figure 2-13 shows the res

7CreatingaToken...166GeneratingBindingsfortheBoard...

(5.x to 5.2) Upgrading Replicated Servers70 Sun ONE Directory Server Installation and Tuning Guide • June 2003Figure 2-15 shows the 5.2 topology follo

71Part 2TuningChapter 3, “Top Tuning Tips”Chapter 4, “Hardware Sizing”Chapter 5, “Tuning the Operating System”Chapter 6, “Tuning Cache Sizes”Chapter 7

72 Sun ONE Directory Server Installation and Tuning Guide • June 2003

73Chapter 3Top Tuning TipsTuning performance implies modifying the default configuration to reflect specificdeployment requirements.This guide describ

74 Sun ONE Directory Server Installation and Tuning Guide • June 2003Table 3-1 Tuning ProcessPhase DescriptionDefine goals Define specific, measurable

Chapter 3 Top Tuning Tips 75This chapter lists basic recommendations that apply almost every time you tune aDirectory Server instance. Although the re

76 Sun ONE Directory Server Installation and Tuning Guide • June 2003a. Remove unnecessary indexes and add additional indexes to supportexpected reque

Chapter 3 Top Tuning Tips 776. Distribute disk activity.Especially for deployments supporting large numbers of updates, DirectoryServer can be extreme

78 Sun ONE Directory Server Installation and Tuning Guide • June 2003

79Chapter 4Hardware SizingAppropriate hardware sizing is a critical component of directory service planningand deployment.When sizing hardware, the am

8 Sun ONE Directory Server Installation and Tuning Guide • June 2003

Suggested Minimum Requirements80 Sun ONE Directory Server Installation and Tuning Guide • June 2003Minimum disk space requirements include 1 GB devote

Sizing Physical MemoryChapter 4 Hardware Sizing 81OnWindowssystems,formatdrivesasNTFSratherthanFAT.FATisnotsupported for use with Directory Server. NT

Sizing Physical Memory82 Sun ONE Directory Server Installation and Tuning Guide • June 2003Estimating memory size required to run Directory Server inv

Sizing Physical MemoryChapter 4 Hardware Sizing 83To estimate approximate memory size, perform the following steps.1. Estimate the base size of the se

Sizing Physical Memory84 Sun ONE Directory Server Installation and Tuning Guide • June 2003Additionally, allocate memory for general system overhead a

Sizing Disk SubsystemsChapter 4 Hardware Sizing 85If the system cannot accommodate additional memory, yet you continue to observeconstant page swappin

Sizing Disk Subsystems86 Sun ONE Directory Server Installation and Tuning Guide • June 20035. Add extra disk space to compensate for error and variati

Sizing Disk SubsystemsChapter 4 Hardware Sizing 87Transaction LogTransaction log volume depends upon peak write loads. If writes occur in bursts,trans

Sizing Disk Subsystems88 Sun ONE Directory Server Installation and Tuning Guide • June 2003If the deployment involves replication, plan additional spa

Sizing Disk SubsystemsChapter 4 Hardware Sizing 89Transaction LogsWhen durable transaction capabilities are enabled, Directory Server performs asynchr

9About This GuideSun™ONE Directory Server 5.2 is a powerful and scalable distributed directoryservice based on the industry-standard Lightweight Direc

Sizing Disk Subsystems90 Sun ONE Directory Server Installation and Tuning Guide • June 2003Cache Files on Memory Based File SystemsIn a tmpfs file sys

Sizing Disk SubsystemsChapter 4 Hardware Sizing 91RAID AlternativesRAIDstandsfor Redundant Arrayof InexpensiveDisks. As the name suggests, theprimary

Sizing Disk Subsystems92 Sun ONE Directory Server Installation and Tuning Guide • June 2003RAID 0, Striped VolumeStriping spreads dataacrossmultiple p

Sizing Disk SubsystemsChapter 4 Hardware Sizing 93During normal operation, RAID 5 usually offers lower performance than RAID 0,1+0 and 0+1, as a RAID

Sizing for Multiprocessor Systems94 Sun ONE Directory Server Installation and Tuning Guide • June 2003Monitoring I/O and Disk UseDisksshould notbesatu

Sizing for SSLChapter 4 Hardware Sizing 95Although hardware accelerator cards cannot eliminate the impact of using SSL,they can improve performance si

Sizing for SSL96 Sun ONE Directory Server Installation and Tuning Guide • June 2003

97Chapter 5Tuning the Operating SystemDefault system and networksettings are not suitable for high performancedirectory services. Tuning the system fo

Patching the System98 Sun ONE Directory Server Installation and Tuning Guide • June 2003Patching the SystemIn order to maintain overall system securit

Enforcing Basic SecurityChapter 5 Tuning the Operating System 99Strong PasswordsUsea superuseror Administrator passwordat least 8 characters long that