You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2012/12/17 16:27:21 UTC
svn commit: r842827 - in /websites/staging/directory/trunk/content: ./
apacheds/ apacheds/advanced-ug/ apacheds/advanced-ug/images/
Author: buildbot
Date: Mon Dec 17 15:27:19 2012
New Revision: 842827
Log:
Staging update by buildbot for directory
Added:
websites/staging/directory/trunk/content/apacheds/advanced-ug/3.1-administrative-points.html
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.graphml (with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.png (with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.graphml (with props)
websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.png (with props)
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html
websites/staging/directory/trunk/content/apacheds/advanced-users-guide.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon Dec 17 15:27:19 2012
@@ -1 +1 @@
-1422759
+1422981
Modified: websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html (original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/3-admin-model.html Mon Dec 17 15:27:19 2012
@@ -170,6 +170,10 @@
<li>Replication is not managed with any administration point</li>
</ul>
<p>Those missing parts will be implemented in the forthcoming versions.</p>
+<h2 id="chapter-content">Chapter content</h2>
+<ul>
+<li><a href="3.1-administrative-points.html">3.1 - Administrative Points</a></li>
+</ul>
<div class="nav">
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/3.1-administrative-points.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-ug/3.1-administrative-points.html (added)
+++ websites/staging/directory/trunk/content/apacheds/advanced-ug/3.1-administrative-points.html Mon Dec 17 15:27:19 2012
@@ -0,0 +1,272 @@
+<!DOCTYPE html>
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<html>
+ <head>
+ <title>3.1. Administrative points — Apache Directory</title>
+
+ <link href="./../../css/common.css" rel="stylesheet" type="text/css">
+ <link href="./../../css/green.css" rel="stylesheet" type="text/css">
+
+ </head>
+ <body>
+ <div id="container">
+ <div id="header">
+ <div id="subProjectsNavBar">
+ <a href="./../../">
+
+ Apache Directory Project
+
+ </a>
+ |
+ <a href="./../../apacheds">
+
+ <STRONG>ApacheDS</STRONG>
+
+ </a>
+ |
+ <a href="./../../studio">
+
+ Apache Directory Studio
+
+ </a>
+ |
+ <a href="./../../api">
+
+ Apache LDAP API
+
+ </a>
+ </div><!-- subProjectsNavBar -->
+ </div><!-- header -->
+ <div id="content">
+ <div id="leftColumn">
+
+<div id="navigation">
+
+ <h5>ApacheDS 2.0</h5>
+ <ul>
+ <li><a href="./../../apacheds/">Home</a></li>
+ <li><a href="./../../apacheds/features.html">Features</a></li>
+ </ul>
+ <h5>Downloads</h5>
+ <ul>
+ <li><a href="./../../apacheds/downloads.html">ApacheDS 2.0.0-M8</a> <img src="./../../images/new_badge.gif" alt="" style="margin- bottom:- 3px;" border="0"></li>
+ <li><a href="./../../apacheds/download-old-versions.html">Older versions</a></li>
+ </ul>
+ <h5>Documentation</h5>
+ <ul>
+ <li><a href="./../../apacheds/basic-users-guide.html">Basic User's Guide </a></li>
+ <li><a href="./../../apacheds/advanced-users-guide.html">Advanced User's Guide</a></li>
+ <li><a href="./../../apacheds/developers-guide.html">Developer's Guide</a></li>
+ <li><a href="./../../apacheds/configuration/ads-2.0-configuration.html">Configuration</a></li>
+ <!--li><a href="./../../apacheds/gen-docs/latest">Generated Reports (e.g. JavaDocs)</a></li-->
+ </ul>
+
+
+ <h5>Support</h5>
+ <ul>
+ <li><a href="./../../mailing-lists-and-irc.html">Mailing Lists & IRC</a></li>
+ <li><a href="./../../sources.html">Sources</a></li>
+ <li><a href="./../../issue-tracking.html">Issue Tracking</a></li>
+ <li><a href="./../../commercial-support.html">Commercial Support</a></li>
+ </ul>
+ <h5>Community</h5>
+ <ul>
+ <li><a href="./../../contribute.html">How to Contribute</a></li>
+ <li><a href="./../../team.html">Team</a></li>
+ <li><a href="./../../original-project-proposal.html">Original Project Proposal</a></li>
+ <li><a href="./../../special-thanks.html" class="external-link" rel="nofollow">Special Thanks</a></li>
+ </ul>
+ <h5>About Apache</h5>
+ <ul>
+ <li><a href="http://www.apache.org/">Apache</a></li>
+ <li><a href="http://www.apache.org/licenses/">License</a></li>
+ <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+ <li><a href="http://www.apache.org/foundation/thanks.html">Thanks</a></li>
+ <li><a href="http://www.apache.org/security/">Security</a></li>
+ </ul>
+
+</div><!-- navigation -->
+
+ </div><!-- leftColumn -->
+ <div id="rightColumn">
+
+
+ <div class="nav">
+ <div class="nav_prev">
+
+ <a href="3-admin-model.html">3 - Administrative Model</a>
+
+ </div>
+ <div class="nav_up">
+
+ <a href="../3-admin-model.html">Administrative Model</a>
+
+ </div>
+ <div class="nav_next">
+
+ <a href="4-.html">4 -</a>
+
+ </div>
+ <div class="clearfix"></div>
+ </div>
+
+
+<p><a name="3.1.Administrativepoints-Introduction"></a></p>
+<h1 id="introduction">Introduction</h1>
+<p>An <em>Administrative Point</em> is an entry which is defining a starting point
+from which some of the four existing administrative roles will span. It's
+important to understand than an Administrative Point (or <em>AP</em>) comes hand
+in hand with the associated <em>Subentries</em>, otherwise it's useless.</p>
+<p>Any entry can be defined as an <em>AP</em>.</p>
+<p>In the following schema, we have depicted a DIT with three <em>AP</em>s, the big
+one being an <em>AAP</em>, the blue one is a <em>SAP</em> and the green one is an <em>IAP</em>.
+They all define an area on which they are active and the dashed lines for
+the <em>IAP</em> are used to express the fact that an entry within the <em>IAP</em> area
+still depends on the higher <em>AAP</em>.</p>
+<p><img alt="APs-tree" src="images/APs-tree.png" /></p>
+<p>Directly under an <em>AP</em>, we will find some <em>Subentries</em> defining the scopes
+on which they are active. These scopes (one per subentry) are called
+<em>SubtreeSpecification</em>, and define the entries that can be handled by the
+role the Subentry is defined for.</p>
+<p>The schema shows the relation between the <em>AP</em> and one <em>SubEntry</em> :</p>
+<p><img alt="subentry" src="images/subentry.png" /></p>
+<p><a name="3.1.Administrativepoints-AdministrativePoint"></a></p>
+<h2 id="administrative-point">Administrative Point</h2>
+<p>We will describe the types of Administrative Points we are managing and the
+way they impact their associated Administrative Areas (<em>AA</em>)</p>
+<p>We have three different kind of <em>AP</em> :
+<em> Autonomous AP ( </em>AAP<em>)
+</em> Specific AP (<em>SAP</em>)
+<em> Inner AP (</em>IAP*)</p>
+<p>Those three different <em>AP</em>s are related with each other in this way :
+<em> </em>AAPs<em> manage an </em>AA<em> as if all the possible type of </em>SAP<em> where declared
+for this area
+</em> <em>SAPs</em> manage an <em>AA</em> with respect to one specific kind of role (Access
+Control, Collective Attributes, SubSchema or Trigger Execution )
+<em> IAPs manage an </em>AA<em> inside another </em>AP<em>
+</em> An <em>AAP</em> or a <em>SAP</em> start at some point in the tree, and all the entries
+below this <em>AAP</em>/<em>SAP</em> aren't related to any other <em>AAP</em>. That also means
+that if an <em>AAP</em>/<em>SAP</em> is created below an existing AP, then all the
+entries it covers are unlinked from the previous AP (except that for <em>SAP</em>,
+we just logically keep a link to the higher AP for all the other aspects
+but the one covered by the new <em>SAP</em>)
+<em> An </em>IAP<em> <em>must</em> be included into another </em>AP<em>, being it an </em>AAP<em>, </em>SAP<em>
+or </em>IAP<em>. It controls a specific aspect too, as for the </em>SAP<em>, but it will
+be combined with any of the above </em>AP*.</p>
+<p><a name="3.1.Administrativepoints-Roles"></a></p>
+<h2 id="roles">Roles</h2>
+<p><em>AP</em> are managing some administrative aspect, defined by a role :
+<em> ACI : Manage the access control
+</em> CollectiveAttribute : Manage the collective attributes
+<em> SubSchema (not handled atm)
+</em> TriggrExecution : Manage the execution of stored procedures</p>
+<p><a name="3.1.Administrativepoints-Subentry"></a></p>
+<h1 id="subentry">Subentry</h1>
+<p>Once we have defined an <em>AP</em>, we can add some <em>subentries</em> which contain
+the description of the administrative actions, including :
+<em> The area this </em>subentry<em> covers, defined by a </em>SubtreeSpecification<em>,
+named </em>subtree*.</p>
+<p>The <em>SubtreeSpecification</em> can be complex. Its grammar is given below :</p>
+<div class="codehilite"><pre><span class="sr"><subtreeSpecificationComponent-e></span> <span class="o">::=</span> <span class="sr"><subtreeSpecificationComponent></span> <span class="sr"><sps-e></span> <span class="sr"><subtreeSpecificationComponent-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><subtreeSpecificationComponent-list></span> <span class="o">::=</span> <span class="s">','</span> <span class="sr"><sps-e></span>
+<span class="sr"><subtreeSpecificationComponent></span> <span class="sr"><sps-e></span>
+<span class="sr"><subtreeSpecificationComponent-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><subtreeSpecificationComponent></span> <span class="o">::=</span>
+ <span class="s">'base'</span> <span class="sr"><sps></span> <span class="n">DN</span>
+ <span class="o">|</span> <span class="s">'specificExclusions'</span> <span class="sr"><sps></span> <span class="s">'{'</span> <span class="sr"><sps-e></span> <span class="sr"><specificExclusion-e></span> <span class="s">'}'</span>
+ <span class="o">|</span> <span class="s">'minimum'</span> <span class="sr"><sps></span> <span class="n">INTEGER</span>
+ <span class="o">|</span> <span class="s">'maximum'</span> <span class="sr"><sps></span> <span class="n">INTEGER</span>
+ <span class="o">|</span> <span class="s">'specificationFilter'</span> <span class="sr"><sps></span> <span class="sr"><refinement-filter></span>
+
+<span class="sr"><specificExclusion-e></span> <span class="o">::=</span> <span class="sr"><specificExclusion></span> <span class="sr"><sps-e></span>
+<span class="sr"><specificExclusion-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><specificExclusion-list></span> <span class="o">::=</span> <span class="s">','</span> <span class="sr"><sps-e></span> <span class="sr"><specificExclusion></span> <span class="sr"><sps-e></span>
+<span class="sr"><specificExclusion-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><specificExclusion></span> <span class="o">::=</span> <span class="s">'chopBefore'</span> <span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="n">DN</span> <span class="o">|</span> <span class="s">'chopAfter'</span>
+<span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="n">DN</span>
+
+<span class="sr"><refinement-filter></span> <span class="o">::=</span> <span class="sr"><refinement></span> <span class="o">|</span> <span class="n">FILTER</span>
+
+<span class="sr"><refinement></span> <span class="o">::=</span>
+ <span class="s">'item'</span> <span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="sr"><oid></span>
+ <span class="o">|</span> <span class="s">'and'</span> <span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="s">'{'</span> <span class="sr"><sps-e></span> <span class="sr"><refinement-e></span> <span class="s">'}'</span>
+ <span class="o">|</span> <span class="s">'or'</span> <span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="s">'{'</span> <span class="sr"><sps-e></span> <span class="sr"><refinement-e></span> <span class="s">'}'</span>
+ <span class="o">|</span> <span class="s">'not'</span> <span class="sr"><sps-e></span> <span class="s">':'</span> <span class="sr"><sps-e></span> <span class="sr"><refinement></span>
+
+<span class="sr"><refinement-e></span> <span class="o">::=</span> <span class="sr"><refinement></span> <span class="sr"><sps-e></span> <span class="sr"><refinement-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><refinement-list></span> <span class="o">::=</span> <span class="s">','</span> <span class="sr"><sps-e></span> <span class="sr"><refinement></span> <span class="sr"><sps-e></span> <span class="sr"><refinement-list></span> <span class="o">|</span> <span class="n">e</span>
+
+<span class="sr"><oid></span> <span class="o">::=</span> <span class="n">DESCR</span> <span class="o">|</span> <span class="n">NUMERICOID</span>
+
+<span class="sr"><sps></span> <span class="o">::=</span> <span class="s">' '</span> <span class="sr"><sps-e></span>
+
+<span class="sr"><sps-e></span> <span class="o">::=</span> <span class="s">' '</span> <span class="sr"><sps-e></span> <span class="o">|</span> <span class="n">e</span>
+</pre></div>
+
+
+<p>Some exemple of such subtrees :</p>
+<p><strong>select all the entries below the AdministrativePoint entry :</strong></p>
+<div class="codehilite"><pre><span class="p">{}</span>
+</pre></div>
+
+
+<p><strong>select all the entries below the ou=users branch
+starting from the AdministrativePoint entry :</strong></p>
+<div class="codehilite"><pre><span class="p">{</span> <span class="n">base</span> <span class="s">"ou=users"</span> <span class="p">}</span>
+</pre></div>
+
+
+<p><strong> exclude all the entries below the "ou=groups" branch : </strong></p>
+<div class="codehilite"><pre><span class="p">{</span> <span class="n">specificExclusions</span> <span class="p">{</span> <span class="n">chopBefore:</span><span class="s">"ou=groups"</span> <span class="p">}</span> <span class="p">}</span>
+</pre></div>
+
+
+ <div class="nav">
+ <div class="nav_prev">
+
+ <a href="3-admin-model.html">3 - Administrative Model</a>
+
+ </div>
+ <div class="nav_up">
+
+ <a href="../3-admin-model.html">Administrative Model</a>
+
+ </div>
+ <div class="nav_next">
+
+ <a href="4-.html">4 -</a>
+
+ </div>
+ <div class="clearfix"></div>
+ </div>
+
+
+ </div><!-- rightColumn -->
+ <div id="endContent"></div>
+ </div><!-- content -->
+ <div id="footer">© 2003-2012, <a href="http://www.apache.org">The Apache Software Foundation</a> - <a href="./../../privacy-policy.html">Privacy Policy</a><br />
+ Apache Directory, ApacheDS, Apache Directory Server, Apache Directory Studio, Apache LDAP API, Apache Triplesec, Triplesec, Apache, the Apache feather logo, and the Apache Directory project logos are trademarks of The Apache Software Foundation.
+ </div>
+ </div><!-- container -->
+ </body>
+</html>
\ No newline at end of file
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.graphml
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.graphml
------------------------------------------------------------------------------
svn:mime-type = application/xml
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/APs-tree.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.graphml
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.graphml
------------------------------------------------------------------------------
svn:mime-type = application/xml
Added: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.png
==============================================================================
Binary file - no diff available.
Propchange: websites/staging/directory/trunk/content/apacheds/advanced-ug/images/subentry.png
------------------------------------------------------------------------------
svn:mime-type = image/png
Modified: websites/staging/directory/trunk/content/apacheds/advanced-users-guide.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/advanced-users-guide.html (original)
+++ websites/staging/directory/trunk/content/apacheds/advanced-users-guide.html Mon Dec 17 15:27:19 2012
@@ -126,8 +126,8 @@
</ul>
</li>
<li><a href="advanced-ug/2-server-config.html">2. Server Configuration</a></li>
-<li><a href="">3. Administrative Model</a><ul>
-<li><a href="">3.1 - Administration Point</a></li>
+<li><a href="advanced-ug/3-admin-model.html">3. Administrative Model</a><ul>
+<li><a href="advanced-ug/3.1-administrative-points.html">3.1 - Administration Point</a></li>
<li><a href="">3.2 - roles</a></li>
<li><a href="">3.3 - subtree</a></li>
</ul>