VSI Enterprise Directory Before You Install

Legal Notice

Confidential computer software. Valid license from VSI required for possession, use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor's standard commercial license.

The information contained herein is subject to change without notice. The only warranties for VSI products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. VSI shall not be liable for technical or editorial errors or omissions contained herein.

HPE, HPE Integrity, HPE Alpha, and HPE Proliant are trademarks or registered trademarks of Hewlett Packard Enterprise.


1. Read Before Installing

VSI OpenVMS Enterprise Directory Version 5.6 is an upgrade of VSI OpenVMS Enterprise Directory Version 5.5 ECO1.

1.1. Prerequisite Software

Before you install the VSI OpenVMS Enterprise Directory Version 5.6 ensure that you have the one of following operating systems installed and working on your machine:

  • OpenVMS Alpha V7.3-2 or later

  • OpenVMS I64 V8.2 or later

For the VSI OpenVMS Enterprise Directory Version 5.6 on OpenVMS Alpha V7.3-2 or later (excluding Topaz Alpha), the following optional softwares can be installed on your system:

  1. For LDAP or X.500 protocols that use RFC1006 connections, VSI TCP/IP Services V5.4 ECO5 or later for OpenVMS Alpha.

  2. For X.500 protocols over an OSI network, DECnet-Plus for OpenVMS Alpha V7.3-2 or later including the application option (OSAK).

    Note

    At least one of the above-mentioned optional softwares need to be installed for VSI OpenVMS Enterprise Directory to work.

  3. For LDAPv3 over SSL, VSI SSL V1.1 or later for OpenVMS Alpha.

For the VSI OpenVMS Enterprise Directory Version 5.6 on OpenVMS Alpha V8.2 or later, the following optional softwares can be installed on your system:

  1. For LDAP or X.500 protocols that use RFC1006 connections, VSI TCP/IP Services V5.5 or later for OpenVMS.

  2. For X500 protocols over an OSI network, DECnet-Plus for OpenVMS Alpha V8.2 or later including the application option (OSAK).

    Note

    At least one of the above-mentioned optional softwares need to be installed for VSI OpenVMS Enterprise Directory to work.

  3. For LDAPv3 over SSL, VSI SSL V1.1 or later for OpenVMS.

For the VSI OpenVMS Enterprise Directory Version 5.6 on OpenVMS I64 V8.2 or later, the following optional softwares can be installed on your system:

  1. VSI TCP/IP Services V5.5 or later for OpenVMS Integrity servers.

  2. For X.500 protocols over an OSI network, DECnet-Plus V8.2 or later for OpenVMS Integrity servers including the application option (OSAK).

    Note

    At least one of the above-mentioned optional softwares need to be installed for VSI OpenVMS Enterprise Directory to work.

  3. For LDAPv3 over SSL, VSI SSL V1.1 or later for OpenVMS Integrity servers.

1.2. New Features in this Release

Following are the new features in this release:

  • Password Policy

    VSI Enterprise Directory Version 5.6 implements the password policy as defined in Draft Behera. The policy provides the ability to ensure the secure read and update access to directory information throughout the network. The policy is applied on a password that is used to authenticate. The policy also includes the following:

    • Whether and when passwords expire.

    • Whether failed bind attempts cause the account to be locked.

    • If and how users are able to change their passwords.

    The password policy can be applied to any attribute holding a users password used for an authenticated LDAP bind operation. Here the term user represents any LDAP client application that has an identity in the directory.

    For details on usage and applicability of password policy, see Section 11 in the VSI OpenVMS Enterprise Directory Release Notes.

  • Password Hashing

    VSI Enterprise Directory Version 5.6 implements hashing of the users password. Here the term user represents any LDAP client application that has an identity in the directory. The directory server provides options of crypt and the algorithms supported by OpenSSL_add_all_digests( ) function of OpenSSL library with which the users password can be hashed.

    For details on usage and applicability of password hashing, see Section 12 in the VSI OpenVMS Enterprise Directory Release Notes.

  • Configuring VSI Enterprise Directory for Failover Capability on OpenVMS Cluster

    Sample steps and procedures that allow automatic failover of the DSA in a VMS cluster environment have been added to section 13 in the VSI OpenVMS Enterprise Directory Release Notes.

  • Enabling Memory Tracing Facility

    Memory tracing facility is added to this version of DSA, which can be turned on as required for faster diagnostics of DSA. For details on enabling memory tracing facility, see Section 14 in the VSI OpenVMS Enterprise Directory Release Notes.

  • Support for Samba Schema 3.0

    Samba 3.0 Schema elements are supported in this version of VSI Enterprise Directory. For details on Samba 3.0 schema elements, see Section 15 in the VSI OpenVMS Enterprise Directory Release Notes.

1.3. Configuration Tutorials

Chapter 2 and Chapter 3 of VSI Enterprise Directory — Management provide configuration tutorials. If you are installing VSI Directory products for the first time, you might find the tutorials a useful introduction to managing the product.