Skip to content

Commit 89a1c5f

Browse files
author
Open Identity Platform Community
committed
upload OpenDJ docs after deploy c19cb1ec29359a2f63f32753c54b837cb6998187
1 parent c723a0b commit 89a1c5f

File tree

325 files changed

+264104
-213571
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

325 files changed

+264104
-213571
lines changed

opendj/modules/ROOT/attachments/Example.ldif

+4,094
Large diffs are not rendered by default.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
# The contents of this file are subject to the terms of the Common Development and
2+
# Distribution License (the License). You may not use this file except in compliance with the
3+
# License.
4+
#
5+
# You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
6+
# specific language governing permission and limitations under the License.
7+
#
8+
# When distributing Covered Software, include this CDDL Header Notice in each file and include
9+
# the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
10+
# Header, with the fields enclosed by brackets [] replaced by your own identifying
11+
# information: "Portions Copyright [year] [name of copyright owner]".
12+
#
13+
# Portions Copyright 2015 ForgeRock AS.
14+
15+
# Captured dsconfig command to replace anonymous read access with authenticated access.
16+
# Edit this script to match your deployment.
17+
#
18+
# This command does not affect global-aci properties allowing anonymous access
19+
# to read the root DSE and to read directory schema definitions,
20+
# nor to use selected LDAP controls and extended operations.
21+
#
22+
# This command works against a server built following the changes introduced
23+
# in http://sources.forgerock.org/changelog/opendj?cs=9325.
24+
# If the global-aci settings are different on your OpenDJ server,
25+
# generate this script for that server as described in the documentation.
26+
#
27+
dsconfig set-access-control-handler-prop \
28+
--remove global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|debugsearchindex\|\|changes\|\|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|\|newSuperior\|\|deleteOldRDN\"\)\(version\ 3.0\;\ acl\ \"Anonymous\ read\ access\"\;\ allow\ \(read,search,compare\)\ userdn=\"ldap:///anyone\"\;\) \
29+
--remove global-aci:\(targetattr=\"createTimestamp\|\|creatorsName\|\|modifiersName\|\|modifyTimestamp\|\|entryDN\|\|entryUUID\|\|subschemaSubentry\|\|etag\|\|governingStructureRule\|\|structuralObjectClass\|\|hasSubordinates\|\|numSubordinates\"\)\(version\ 3.0\;\ acl\ \"User-Visible\ Operational\ Attributes\"\;\ allow\ \(read,search,compare\)\ userdn=\"ldap:///anyone\"\;\) \
30+
--add global-aci:\(targetattr!=\"userPassword\|\|authPassword\|\|debugsearchindex\|\|changes\|\|changeNumber\|\|changeType\|\|changeTime\|\|targetDN\|\|newRDN\|\|newSuperior\|\|deleteOldRDN\"\)\(version\ 3.0\;\ acl\ \"Authenticated\ read\ access\"\;\ allow\(read,search,compare\)\ userdn=\"ldap:///all\"\;\) \
31+
--add global-aci:\(targetattr=\"createTimestamp\|\|creatorsName\|\|modifiersName\|\|modifyTimestamp\|\|entryDN\|\|entryUUID\|\|subschemaSubentry\|\|etag\|\|governingStructureRule\|\|structuralObjectClass\|\|hasSubordinates\|\|numSubordinates\"\)\(version\ 3.0\;\ acl\ \"User-Visible\ Operational\ Attributes\"\;\ allow\(read,search,compare\)\ userdn=\"ldap:///all\"\;\) \
32+
--hostname opendj.example.com \
33+
--port 4444 \
34+
--trustStorePath /path/to/opendj/config/admin-truststore \
35+
--bindDN cn=Directory\ Manager \
36+
--bindPassword ****** \
37+
--no-prompt
38+
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Attributes
21+
The optional attribute list specifies the attributes to return in the entries found
22+
by the search. In addition to identifying attributes by name such as `cn sn mail`
23+
and so forth, you can use the following notations, too.
24+
--
25+
26+
`*`::
27+
Return all user attributes such as `cn`, `sn`, and `mail`.
28+
29+
`+`::
30+
Return all operational attributes such as `etag` and `pwdPolicySubentry`.
31+
32+
`@objectclass`::
33+
Return all attributes of the specified object class, where __objectclass__ is one of the object classes on the entries returned by the search.
34+
35+
`1.1`::
36+
Return no attributes, only the DNs of matching entries.
37+
38+
--
39+
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Examples
21+
The following example displays index information.
22+
23+
[source, console]
24+
----
25+
$ bin/backendstat dump-index -n userRoot -b dc=example,dc=com -i id2childrencount
26+
27+
Key (len 2): 1#52
28+
Value (len 8): 1
29+
Key (len 2): 2#52
30+
Value (len 8): 500000
31+
Key (len 9): Total Children Count
32+
Value (len 8): 500001
33+
34+
Total Records: 3
35+
Total / Average Key Size: 13 bytes / 4 bytes
36+
Total / Average Data Size: 24 bytes / 8 bytes
37+
----
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Examples
21+
22+
The following example backs up all user data while the server is online.
23+
24+
[source, console]
25+
----
26+
$ backup -p 4444 -D "cn=Directory Manager" -w password \
27+
-a -d /path/to/opendj/bak -t 0
28+
Backup task 20110613143801866 scheduled to start ...
29+
----
30+
The following example schedules back up of all user data every night at 2 AM when the server is online, and
31+
notifies \[email protected] when finished, or on error.
32+
33+
[source, console]
34+
----
35+
$ backup -p 4444 -D "cn=Directory Manager" -w password -a \
36+
-d /path/to/opendj/bak --recurringTask "00 02 * * *" \
37+
--completionNotify [email protected] --errorNotify [email protected]
38+
Recurring Backup task BackupTask-988d6adf-4d65-44bf-8546-6ea74a2480b0
39+
scheduled successfully
40+
----
41+
The following example backs up all user data while the server is offline.
42+
43+
[source, console]
44+
----
45+
$ stop-ds
46+
Stopping Server...
47+
...
48+
49+
$ backup --backupAll --backupDirectory /path/to/opendj/bak
50+
... msg=The backup process completed successfully
51+
52+
$ start-ds
53+
... The Directory Server has started successfully
54+
----
55+
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Examples
21+
The following command shows the changes from the external change log
22+
in human-readable format.
23+
24+
25+
[source]
26+
----
27+
$ base64 decode -d YWRkOiBkZXNjcmlwdGlvbgpkZXNjcmlwdGlvbjogQSB0aGlyZCBjaGFuZ2UK\
28+
LQpyZXBsYWNlOiBtb2RpZmllcnNOYW1lCm1vZGlmaWVyc05hbWU6IGNuPURpcmVjdG9yeSBNYW5hZ2V\
29+
yLGNuPVJvb3QgRE5zLGNuPWNvbmZpZwotCnJlcGxhY2U6IG1vZGlmeVRpbWVzdGFtcAptb2RpZnlUaW\
30+
1lc3RhbXA6IDIwMTEwNjEzMDcxMjEwWgotCg==
31+
add: description
32+
description: A third change
33+
-
34+
replace: modifiersName
35+
modifiersName: cn=Directory Manager,cn=Root DNs,cn=config
36+
-
37+
replace: modifyTimestamp
38+
modifyTimestamp: 20110613071210Z
39+
-
40+
----
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Examples
21+
The following example starts the Control Panel on a remote host.
22+
23+
[source, console]
24+
----
25+
$ control-panel -r -h opendj.example.com -p 4444 &
26+
----
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
== Examples
21+
The following example adds a script to start OpenDJ at boot time on a Debian-based system,
22+
and then updates the runlevel system to use the script.
23+
24+
[source, console]
25+
----
26+
$ sudo create-rc-script -f /etc/init.d/opendj -u opendj-user
27+
$ sudo update-rc.d opendj
28+
----
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,124 @@
1+
////
2+
3+
The contents of this file are subject to the terms of the Common Development and
4+
Distribution License (the License). You may not use this file except in compliance with the
5+
License.
6+
7+
You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
8+
specific language governing permission and limitations under the License.
9+
10+
When distributing Covered Software, include this CDDL Header Notice in each file and include
11+
the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
12+
Header, with the fields enclosed by brackets [] replaced by your own identifying
13+
information: "Portions Copyright [year] [name of copyright owner]".
14+
15+
Copyright 2015-2016 ForgeRock AS.
16+
Portions Copyright 2024 3A Systems LLC.
17+
18+
////
19+
20+
The `dsconfig` command provides many subcommands.
21+
22+
Subcommands let you create, list, and delete entire configuration components, and also let you get and set component properties. Subcommands therefore have names that reflect these five actions.
23+
24+
* create-__component__
25+
26+
* list-__component__s
27+
28+
* delete-__component__
29+
30+
* get-__component__-prop
31+
32+
* set-__component__-prop
33+
34+
Here, __component__ names are names of managed object types. Subcommand __component__ names are lower-case, hyphenated versions of the friendly names. When you act on an actual configuration component, you provide the name of the component as an option argument.
35+
For example, the Log Publisher component has these corresponding subcommands.
36+
37+
* `create-log-publisher`
38+
39+
* `list-log-publishers`
40+
41+
* `delete-log-publisher`
42+
43+
* `get-log-publisher-prop`
44+
45+
* `set-log-publisher-prop`
46+
47+
When you create or delete Log Publisher components and when you get and set their configuration properties, you provide the name of the actual log publisher, which you can find by using the `list-log-publishers` subcommand.
48+
49+
[source, console]
50+
----
51+
$ dsconfig \
52+
list-log-publishers \
53+
--hostname opendj.example.com \
54+
--port 4444 \
55+
--bindDN "cn=Directory Manager" \
56+
--bindPassword password \
57+
--trustAll
58+
59+
Log Publisher : Type : enabled
60+
------------------------------:------------------------:--------
61+
File-Based Access Logger : file-based-access : true
62+
File-Based Audit Logger : file-based-audit : false
63+
File-Based Debug Logger : file-based-debug : false
64+
File-Based Error Logger : file-based-error : true
65+
File-Based HTTP Access Logger : file-based-http-access : false
66+
Replication Repair Logger : file-based-error : true
67+
68+
$ dsconfig \
69+
get-log-publisher-prop \
70+
--publisher-name "File-Based Access Logger" \
71+
--property rotation-policy \
72+
--hostname opendj.example.com \
73+
--port 4444 \
74+
--bindDN "cn=Directory Manager" \
75+
--bindPassword password \
76+
--trustAll
77+
Property : Value(s)
78+
----------------:--------------------------------------------------------------
79+
rotation-policy : 24 Hours Time Limit Rotation Policy, Size Limit Rotation
80+
: Policy
81+
----
82+
Many subcommands let you set property values. Notice in the reference for the subcommands below that specific options are available for handling multi-valued properties. Whereas you can assign a single property value by using the `--set` option, you assign multiple values to a multi-valued property by using the `--add` option. You can reset the values of the multi-valued property by using the `--reset` option.
83+
Some property values take a time duration. Durations are expressed as numbers followed by units. For example `1 s` means one second, and `2 w` means two weeks. Some durations have minimum granularity or maximum units, so you cannot necessary specify every duration in milliseconds or weeks for example. Some durations allow you to use a special value to mean unlimited. Units are specified as follows.
84+
85+
* `ms`: milliseconds
86+
87+
* `s`: seconds
88+
89+
* `m`: minutes
90+
91+
* `h`: hours
92+
93+
* `d`: days
94+
95+
* `w`: weeks
96+
97+
Use the following options to view help for subcommands.
98+
--
99+
100+
`dsconfig --help-all`::
101+
Display all subcommands
102+
103+
`dsconfig --help-core-server`::
104+
Display subcommands relating to core server
105+
106+
`dsconfig --help-database`::
107+
Display subcommands relating to caching and back-ends
108+
109+
`dsconfig --help-logging`::
110+
Display subcommands relating to logging
111+
112+
`dsconfig --help-replication`::
113+
Display subcommands relating to replication
114+
115+
`dsconfig --help-security`::
116+
Display subcommands relating to authentication and authorization
117+
118+
`dsconfig --help-user-management`::
119+
Display subcommands relating to user management
120+
121+
--
122+
For help with individual subcommands, either use `dsconfig subcommand --help`, or start `dsconfig` in interactive mode, without specifying a subcommand.
123+
124+
To view all component properties, use the `dsconfig list-properties` command.

0 commit comments

Comments
 (0)