Download Quest One Quick Connect Virtual Directory Server

Transcript
5.2. LISTENER CONFIGURATION
In order to make a valid selection here, you will need to have at least one server group defined under the Output
node of the configuration. Remember that server groups contain at least one or more servers that are assumed
to be equivalent. You can read more about server groups in the OUTPUT 6 chapter.
Virtual Tree QC VDS supports the ability to define a virtual tree for any listener. This allows you to design a
completely virtual directory that will be presented to any client connecting to the listener. This facility allows you
to completely abstract the data stored in any backend servergroups so that a client is only aware of the directory
information that you have set out to present. In general this facility would only be used for listeners that have
been configured for the LDAP/S protocol. Although it might be possible to use a Virtual Tree with an alternate
protocol such as HTTP (if building an HTTP to LDAP bridge) if you perform the appropriate processing in a
stage before the Virtual Tree is implemented (see the section Attached Stages 5.2.6). However, the complexity
of such a solution would be an advanced topic and may require support from Quest Software.
In order to use this facility, you will need to create a Virtual Root for your tree and then construct virtual nodes
as you require. Finally, if you wish to include data stored within external repositories, you will need to create
virtual mountpoints, that can be used to import the data into your virtual tree. The ’New Virtual Root’ button can
be used to start constructing your virtual tree. The ’New Virtual Mount Point Root’ button can be used to create
a virtual root that maps directly onto a DN within a particular ServerGroup.
Please see the section How To Use Virtual Trees 5.3 for more information.
5.2.2
Canonicalization
This tab is only meaningful when the LDAP or LDAPS protocol is defined for this listener. Otherwise, this
section will be inactive and unused. It is possible for QC VDS to canonicalize entries coming into QC VDS.
Canonicalization basically means:
1. Trimming spurious whitespaces (i.e. removing whitespaces between DN elements and the commas separating them)
2. Converting attribute names into lowercase
Canonicalization can be very helpful when processing entries. The LDAP model specifies that all LDAP attribute
names are to be treated in a case-insensitive way. Well-behaved LDAP clients will have no problem with canonicalization, although there are a few LDAP clients out there who, contrary to the standard, will not recognize
LDAP attributes in a case-insensitive way. If problems arise with your client applications that point to this type of
behavior, you may want to disable canonicalization or alternatively you can select the check-box which allows
you to ’Canonicalize DN only for processing stages’. If this option is checked, the DN in each PDU will only be
canonicalized as it moves through the processing engine, and will be converted back to its original form before
it is sent either to the ServerGroup or client that it is destined for. While the PDU moves through the processing
engine, the original DN will be stored within the PDU hash for use later.
Figure 5.3: Canonicalization Options
User Reference Manual
48