eDirectory Design Notes

For networks with fewer than 2000 objects consider the basic tree structure – in this environments you may not need to use advanced features like partitioning; eDirectory will be able to take care of itself with its default settings.

Some legitimate service orientated tree designs, which are now becoming common,  include:

1. eCommerce/LDAP (typically very flat)
2. Workforce tree
3. Multiple tree
4. Metatree
5. iChaintree

Partitioning & Replication

Partition design guidelines changes with eDirectory 8.7

1. trees can store an unlimited number of objects
2. partitions can contain an unlimited number of objects
3. the number of child partitions, including subordinate references, is unlimited
4. you can have an unlimited number of replicas (always have 2 or 3)
5. a non-dedicated replica server can hold 50 replicas
6. a dedicated replica server can hold 150-200 replicas

Partitioning Rules

1. All partition begin with a single container object that is the highest point in the partition’s hierarchical tree, which is a subtree of eDirectory.
2. All partitions must contain a connected subtree.
3. All non-container objects must exist in the same partition as their parent object.
4. All container objects not designated as partitions must exist in the same partition as their parent object.
5. A partition cannot overlap another partition.
6. The name of a partition is the fully qualified, distinguished name of the partition root object.

Replica Filters are managed through the server object. Each server can have only one filter which applies to all the replicas it holds. NDS eDirectory 8.5 (build version 85.xx) was the first eDirectory version to implement Filtered Replicas.

External References

1. refer to objects not physically located on the local server (called external objects).
2. provide the server with an ID for the operating system.
3. provide tree connectivity.
4. Allow attributes of external objects to be cached to improve performance

External references only hold a few of the attributes of the real objects and external references now receive replica pointers to improve tree walking efficiency.

Providing Tree connectivity - external references also effectively provide the missing links between replicas on the server and the [Root]. Allowing names to be resolved fully.

The following operations create external references:

By default eDirectory builds a list of unused external references, ready to be deleted, every 8 days and 30 minutes (but this can be altered).

Back Links

The real object relating to each and every external reference has a back link attribute which points to the external reference, maintaining a link between the two to allow eDirectory to update external references when the real object is renamed or deleted.

The back link process runs 2 hours after the eDirectory database has open and every 780 minutes thereafter (but this can be altered). This process:

1. verifies all external references and removed any expired or unnecessary external references
2. verifies all backlink attributes, creating any back links eDirectory could not create when it created the external reference.

Tree walking

If a server receives a request it cannot satisfy it initiates a search for a server that can fulfill it. Until a relevant partition is found, the search proceeds toward the eDirectory [Root], since any request can be pursued successfully by beginning at the [Root]. If it can find no other information, it can at least provide the name server that has a partition with information about objects that are closer to the [Root] than itself. During the tree-walking process, when the server discovers information about how to get closer to the desired partition and server, this information is sent back to the server that sent the request – this progress report is called a referral. The referral provides the requesting server with a new list of name servers to try if the name server cannot satisfy a request. Referals contain:

1. Server List – a list of name servers.
2. Class Definition Cache – holds the expanded class definition of each eDirectory class

This tree walking process relies upon subordinate references to connect the tree. The subordinate reference is an entry in a superior.

Design Project Roles

Project Manager

Helps move the team through the process by maintaining the project’s focus and schedule, and by maintaining contact with others in the organization.

1. Makes final decisions
2. Acquires resources and funding
3. Manages costs and time estimates
4. Oversees the design and implementation phases of the project
5. Identifies training needs in order to maintain standards in the new eDirectory tree
6. Educates the organization on the changes and effects of the new design

eDirectory Administrator

Designs the logical structure of the tree. Has worked extensively with eDirectory or has completed specialised training relative to Netware and eDirectory. This role can be filled by an outside consultant.

1. Acts as team leader
2. Creates the tree design
3. Maintains eDirectory design standards
4. Designs eDirectory security
5. Formulates a strategy for partitioning and replication
6. Maintains a list of applications, resources, printers, etc.
7. Communicates with management and departments to determine needs
8. Documents the tree design and standards

Server Administrator

Works daily with server administration and designs the physical network structure.

1. Maintains network performance levels
2. Ensures implementation of a logical time synchronization strategy
3. Determines hardware requirements
4. Plans server placement in the tree
5. Determines how to remove and add servers
6. Determines backward compatibility
7. Combines tree design with the organization’s disaster recovery strategy

Connectivity Specialist

Works with he physical network, managing the internetwork backbone, telecommunications, WAN design, and router placement.

1. Makes decisions regarding the use of single or multiple protocols on the network
2. Makes sure Internet, directories, and disparate operating systems are interoperable
3. Makes sure the network design delivers optimal internetwork traffic throughout
4. Advises the planning team about routing, protocols, and WAN structure
5. Assists overall eDirectory design in regards to WAN traffic
6. Determines the effect of routing, protocols, telecommunications, or WAN structure on the eDirectory tree design

Design Phases

Approach Phase

1. Polling users and network personnel affected by the design
2. Gathering business information related to network design
3. Determining the scope of the design process
4. Creating a preliminary schedule
5. Gathering information about the applications you are using

Design Phase

1. Designing the eDirectory Tree Structure
2. Planning the User Environment
3. Determining a Partition and Replica Strategy

Implementation Phase

1. Planning a Time Synchronization Strategy
2. Implementing an eDirectory Design
3. Analysis of Current eDirectory Design

Needs Analysis

Before an eDirectory design can be begun information must be gathered about the company. A company profile is needed, including information about the nature of the company, its organizational and physical structure and the networks structure (with particular attention to any WAN links). The information will include data on the users and the resources they access. Key source documents might include a network diagram, organization diagram and company profile, the physical structure of the company (offices, locations of servers, users and resources). An indication of predicted future development.

Design Tree Structure

Identify Fundamental Directory Design Factors

1. Network Layout
2. Organizational Structure
3. Speed and Efficiency
4. Fault Tolerance
5. Security
6. Scalability and Operability
7. Ongoing eDirectory Design

Naming Standards Documents

Object Naming Standards

1. List each type of object used in the eDirectory tree
2. Specify the standard you will use for each object type
3. Provide a brief example for each object type used
4. Specify the rationale for each object type selected

Object Attribute Standards

1. Required attributes
2. Optional attributes you want network administrators to define when creating an object
3. Attributes that are populated automatically via a template object in eDirectory