You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2012/10/29 18:34:43 UTC
svn commit: r836505 [1/2] - in /websites/staging/directory/trunk/content: ./
apacheds/basic-ug/ apacheds/basic-ug/images/
Author: buildbot
Date: Mon Oct 29 17:34:42 2012
New Revision: 836505
Log:
Staging update by buildbot for directory
Added:
websites/staging/directory/trunk/content/apacheds/basic-ug/images/w32_service_properties.png (with props)
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/basic-ug/1-how-to-begin.html
websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.1-changing-server-port.html
websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.4-configure-logging.html
websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.5-anonymous-access.html
websites/staging/directory/trunk/content/apacheds/basic-ug/1.5-sample-configuration.html
websites/staging/directory/trunk/content/apacheds/basic-ug/3-basic-security.html
websites/staging/directory/trunk/content/apacheds/basic-ug/3.1-authentication-options.html
websites/staging/directory/trunk/content/apacheds/basic-ug/3.2-basic-authorization.html
websites/staging/directory/trunk/content/apacheds/basic-ug/3.3-enabling-ssl.html
websites/staging/directory/trunk/content/apacheds/basic-ug/4-integrating-apacheds.html
websites/staging/directory/trunk/content/apacheds/basic-ug/4.1-mozilla-thunderbird.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Mon Oct 29 17:34:42 2012
@@ -1 +1 @@
-1403439
+1403441
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/1-how-to-begin.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/1-how-to-begin.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/1-how-to-begin.html Mon Oct 29 17:34:42 2012
@@ -118,7 +118,7 @@
</div>
<div class="nav_next">
- <a href="../2-handling-data.html">Chapter 2 - Handing Data</a>
+ <a href="2-handling-data.html">Chapter 2 - Handing Data</a>
</div>
<div class="clearfix"></div>
@@ -169,7 +169,7 @@
</div>
<div class="nav_next">
- <a href="../2-handling-data.html">Chapter 2 - Handing Data</a>
+ <a href="2-handling-data.html">Chapter 2 - Handing Data</a>
</div>
<div class="clearfix"></div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.1-changing-server-port.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.1-changing-server-port.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.1-changing-server-port.html Mon Oct 29 17:34:42 2012
@@ -108,8 +108,8 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+
</div>
<div class="nav_up">
@@ -227,8 +227,8 @@ Due to traditional Unix security restric
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+
</div>
<div class="nav_up">
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.4-configure-logging.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.4-configure-logging.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.4-configure-logging.html Mon Oct 29 17:34:42 2012
@@ -126,7 +126,256 @@
<h1 id="144-configure-logging">1.4.4 - Configure logging</h1>
-<p>TODO</p>
+<p>In order to detect and analyze problems, adjusting the log level of a server can be a valuable tool. This section describes how to configure logging within a standalone ApacheDS. </p>
+<div class="toc">
+<ul>
+<li><a href="#144-configure-logging">1.4.4 - Configure logging</a><ul>
+<li><a href="#apacheds-and-logging">ApacheDS and logging</a></li>
+<li><a href="#default-behavior-after-installation">Default behavior after installation</a></li>
+<li><a href="#adjusting-logging-to-your-needs">Adjusting logging to your needs</a><ul>
+<li><a href="#log-file-location-where-the-log-files-are-placed">Log file location (where the log files are placed)</a><ul>
+<li><a href="#linuxmacossolaris">Linux/MacOS/Solaris</a></li>
+<li><a href="#windows">Windows</a></li>
+</ul>
+</li>
+<li><a href="#log-level-how-detailed-the-logs-are">Log level (how detailed the logs are)</a></li>
+<li><a href="#format-for-log-messages">Format for log messages</a></li>
+<li><a href="#advanced-log4j-configuration">Advanced log4j configuration</a></li>
+</ul>
+</li>
+<li><a href="#example-configurations">Example configurations</a></li>
+<li><a href="#log-settings-of-the-windows-daemon-process">Log settings of the Windows daemon process</a></li>
+<li><a href="#resources">Resources</a></li>
+</ul>
+</li>
+</ul>
+</div>
+<h2 id="apacheds-and-logging">ApacheDS and logging</h2>
+<p>ApacheDS 2.0 uses <a href="http://www.slf4j.org/">SLF4J</a> as its logging solution. This is a simple facade for various logging APIs. The default for ApacheDS 2.0 is <a href="http://logging.apache.org/log4j/">log4j</a>.</p>
+<h2 id="default-behavior-after-installation">Default behavior after installation</h2>
+<p>By default, ApacheDS writes log files in the directory <em><APACHDS_HOME>/var/log/</em>. Besides stdout, a <a href="http://logging.apache.org/log4j/docs/api/org/apache/log4j/RollingFileAppender.html">RollingFileAppender</a> is used to collect warnings and errors. It backups the log files when they reach a certain size. </p>
+<p>Here is what the default configuration file <em>log4j.properties</em>, which is located in <em><APACHDS_HOME>/conf/</em>, looks like.
+The name of the <em>RollingFileAppender</em> is "R":</p>
+<div class="codehilite"><pre><span class="n">log4j</span><span class="o">.</span><span class="n">rootCategory</span><span class="o">=</span><span class="n">WARN</span><span class="p">,</span> <span class="n">stdout</span><span class="p">,</span> <span class="n">R</span>
+
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">stdout</span><span class="o">=</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">log4j</span><span class="o">.</span><span class="n">ConsoleAppender</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">stdout</span><span class="o">.</span><span class="n">layout</span><span class="o">=</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">log4j</span><span class="o">.</span><span class="n">PatternLayout</span>
+
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">=</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">log4j</span><span class="o">.</span><span class="n">RollingFileAppender</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">File</span><span class="o">=</span><span class="n">apacheds</span><span class="o">-</span><span class="n">rolling</span><span class="o">.</span><span class="nb">log</span>
+
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">MaxFileSize</span><span class="o">=</span><span class="mi">1024</span><span class="n">KB</span>
+<span class="c1"># Keep some backup files</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">MaxBackupIndex</span><span class="o">=</span><span class="mi">5</span>
+
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">layout</span><span class="o">=</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">log4j</span><span class="o">.</span><span class="n">PatternLayout</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">layout</span><span class="o">.</span><span class="n">ConversionPattern</span><span class="o">=</span><span class="p">[</span><span class="nv">%d</span><span class="p">{</span><span class="n">HH:mm:ss</span><span class="p">}]</span> <span class="nv">%p</span> <span class="p">[</span><span class="nv">%c</span><span class="p">]</span> <span class="o">-</span> <span class="nv">%m%n</span>
+
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">stdout</span><span class="o">.</span><span class="n">layout</span><span class="o">.</span><span class="n">ConversionPattern</span><span class="o">=</span><span class="p">[</span><span class="nv">%d</span><span class="p">{</span><span class="n">HH:mm:ss</span><span class="p">}]</span> <span class="nv">%p</span> <span class="p">[</span><span class="nv">%c</span><span class="p">]</span> <span class="o">-</span> <span class="nv">%m%n</span>
+
+<span class="c1"># with these we'll not get innundated when switching to DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">name</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">springframework</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">codec</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">asn1</span><span class="o">=</span><span class="n">WARN</span>
+</pre></div>
+
+
+<p>In this file "R" is configured like this:</p>
+<div class="table-wrap">
+ <table class="confluenceTable">
+ <tbody>
+ <tr>
+ <th class="confluenceTh"> Property name </th>
+ <th class="confluenceTh"> Value in file above </th>
+ <th class="confluenceTh"> Meaning </th>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> File </td>
+ <td class="confluenceTd"> apacheds-rolling.log </td>
+ <td class="confluenceTd"> path to the output log file, in our case relative to <em>var/log</em> </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> MaxFileSize </td>
+ <td class="confluenceTd"> 1024KB </td>
+ <td class="confluenceTd"> maximum size that the output file is allowed to reach before being rolled over to backup files </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> MaxBackupIndex </td>
+ <td class="confluenceTd"> 5 </td>
+ <td class="confluenceTd"> number of backup files kept </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> layout.ConversionPattern </td>
+ <td class="confluenceTd"> [%d{HH:mm:ss}] %p [%c] - %m%n </td>
+ <td class="confluenceTd"> format string for logging events </td>
+ </tr>
+ </tbody>
+ </table>
+</div>
+
+<p>If the default logging does not meet your requirements, you can easily adjust the configuration to your needs.</p>
+<h2 id="adjusting-logging-to-your-needs">Adjusting logging to your needs</h2>
+<h3 id="log-file-location-where-the-log-files-are-placed">Log file location (where the log files are placed)</h3>
+<p>By default the log files are placed at <em><APACHDS_HOME>/var/log/</em>, but that can be changed.</p>
+<h4 id="linuxmacossolaris">Linux/MacOS/Solaris</h4>
+<p>On this systems the location of the log files is configured via an entry in <em>/bin/server.init</em>. Look for the following lines and change it to your preferences:</p>
+<div class="codehilite"><pre><span class="nv">$DAEMON_HOME</span><span class="o">/</span><span class="n">apacheds</span> <span class="o">\</span>
+<span class="o">...</span>
+<span class="o">-</span><span class="n">outfile</span> <span class="nv">$SERVER_HOME</span><span class="sr">/var/</span><span class="nb">log</span><span class="o">/</span><span class="n">apacheds</span><span class="o">-</span><span class="n">stdout</span><span class="o">.</span><span class="nb">log</span> <span class="o">\</span>
+<span class="o">-</span><span class="n">errfile</span> <span class="nv">$SERVER_HOME</span><span class="sr">/var/</span><span class="nb">log</span><span class="o">/</span><span class="n">apacheds</span><span class="o">-</span><span class="n">stderr</span><span class="o">.</span><span class="nb">log</span> <span class="o">\</span>
+<span class="o">...</span>
+<span class="nv">$APACHEDS_HOME</span> <span class="n">start</span>
+</pre></div>
+
+
+<h4 id="windows">Windows</h4>
+<p>On Windows you can use the configuration wizard for the service as shown in the screenshot above. To adjust the log path you have to adjust the values of <em>Redirect Stdout</em> and <em>Redirect Stderror</em></p>
+<h3 id="log-level-how-detailed-the-logs-are">Log level (how detailed the logs are)</h3>
+<p>The following log levels from log4j are used for messages within ApacheDS:</p>
+<div class="table-wrap">
+ <table class="confluenceTable">
+ <tbody>
+ <tr>
+ <th class="confluenceTh"> Level </th>
+ <th class="confluenceTh"> Description from log4j documentation </th>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> DEBUG </td>
+ <td class="confluenceTd"> designates fine-grained informational events that are most useful to debug an application </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> INFO</td>
+ <td class="confluenceTd"> designates informational messages that highlight the progress of the application at coarse-grained level </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> WARN</td>
+ <td class="confluenceTd"> designates potentially harmful situations </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> ERROR</td>
+ <td class="confluenceTd"> designates error events that might still allow the application to continue running </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> FATAL </td>
+ <td class="confluenceTd"> designates very severe error events that will presumably lead the application to abort </td>
+ </tr>
+ </tbody>
+ </table>
+</div>
+
+<p>The default (global) log level in the configuration is <em>WARN</em>. All messages of level WARN and more severe (ERROR, FATAL) are written to the rolling log file. The easiest way to get finer log messages is to change it like this</p>
+<div class="codehilite"><pre><span class="n">log4j</span><span class="o">.</span><span class="n">rootCategory</span><span class="o">=</span><span class="n">DEBUG</span><span class="p">,</span> <span class="n">stdout</span><span class="p">,</span> <span class="n">R</span>
+<span class="o">...</span>
+</pre></div>
+
+
+<p>These detailed log messages took much file space and time and therefore should only be enabled globally in order to analyze problems.</p>
+<p>It is possible to configure the logging more fine grained by using categories. Within the default configuration there are some examples:</p>
+<div class="codehilite"><pre><span class="o">...</span>
+<span class="c1"># with these we'll not get innundated when switching to DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">name</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">springframework</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">codec</span><span class="o">=</span><span class="n">WARN</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">shared</span><span class="o">.</span><span class="n">asn1</span><span class="o">=</span><span class="n">WARN</span>
+</pre></div>
+
+
+<p>If the global level is switched to DEBUG, these definitions override the setting with WARN for certain areas and therefore keep the file a little bit smaller. Learn more about the concept of categories in the <a href="http://logging.apache.org/log4j/docs/manual.html">Short introduction to log4j</a>. </p>
+<h3 id="format-for-log-messages">Format for log messages</h3>
+<p>The format of each line within a log file is controlled by a pattern. For the <em>RollingFileAppender</em> in the default configuration it looks like this</p>
+<div class="codehilite"><pre><span class="o">...</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">layout</span><span class="o">=</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">log4j</span><span class="o">.</span><span class="n">PatternLayout</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">layout</span><span class="o">.</span><span class="n">ConversionPattern</span><span class="o">=</span><span class="p">[</span><span class="nv">%d</span><span class="p">{</span><span class="n">HH:mm:ss</span><span class="p">}]</span> <span class="nv">%p</span> <span class="p">[</span><span class="nv">%c</span><span class="p">]</span> <span class="o">-</span> <span class="nv">%m%n</span>
+<span class="o">...</span>
+</pre></div>
+
+
+<p>Some examples lines within the log file, formatted with the pattern "[%d{HH:mm:ss}] %p [%c] - %m%n" are:</p>
+<div class="codehilite"><pre><span class="o">...</span>
+<span class="p">[</span><span class="mi">12</span><span class="p">:</span><span class="mi">29</span><span class="p">:</span><span class="mo">03</span><span class="p">]</span> <span class="n">WARN</span> <span class="p">[</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">core</span><span class="o">.</span><span class="n">DefaultDirectoryService</span><span class="p">]</span>
+ <span class="o">-</span> <span class="n">You</span> <span class="n">didn</span><span class="s">'t change the admin password of directory service instance '</span><span class="n">default</span><span class="err">'</span><span class="o">.</span>
+ <span class="n">Please</span> <span class="n">update</span> <span class="n">the</span> <span class="n">admin</span> <span class="n">password</span> <span class="n">as</span> <span class="n">soon</span> <span class="n">as</span> <span class="n">possible</span> <span class="n">to</span> <span class="n">prevent</span> <span class="n">a</span> <span class="n">possible</span> <span class="n">security</span> <span class="n">breach</span><span class="o">.</span>
+<span class="o">...</span>
+<span class="p">[</span><span class="mi">12</span><span class="p">:</span><span class="mi">29</span><span class="p">:</span><span class="mo">05</span><span class="p">]</span> <span class="n">INFO</span> <span class="p">[</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">jndi</span><span class="o">.</span><span class="n">ServerContextFactory</span><span class="p">]</span>
+ <span class="o">-</span> <span class="n">Successful</span> <span class="nb">bind</span> <span class="n">of</span> <span class="n">an</span> <span class="n">LDAP</span> <span class="n">Service</span> <span class="p">(</span><span class="mi">636</span><span class="p">)</span> <span class="n">is</span> <span class="n">complete</span><span class="o">.</span>
+<span class="p">[</span><span class="mi">12</span><span class="p">:</span><span class="mi">29</span><span class="p">:</span><span class="mo">05</span><span class="p">]</span> <span class="n">INFO</span> <span class="p">[</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">Service</span><span class="p">]</span> <span class="o">-</span> <span class="n">server:</span> <span class="n">started</span> <span class="n">in</span> <span class="mi">6750</span> <span class="n">milliseconds</span>
+<span class="o">...</span>
+</pre></div>
+
+
+<p>The pattern uses the following conversion characters:</p>
+<div class="table-wrap">
+ <table class="confluenceTable">
+ <tbody>
+ <tr>
+ <th class="confluenceTh"> Character </th>
+ <th class="confluenceTh"> Outputs </th>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> %d </td>
+ <td class="confluenceTd"> date of the logging event in the given format. like "12:29:05" for %d{HH:mm:ss} </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> %p </td>
+ <td class="confluenceTd"> priority (level) of the logging event, like "INFO" or "WARN" </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> %c </td>
+ <td class="confluenceTd"> category of the logging event, like "org.apache.directory.server.Service" </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> %m </td>
+ <td class="confluenceTd"> application supplied message associated with the logging event </td>
+ </tr>
+ <tr>
+ <td class="confluenceTd"> %n </td>
+ <td class="confluenceTd"> platform dependent line separator </td>
+ </tr>
+ </tbody>
+ </table>
+</div>
+
+<p>The <a href="http://logging.apache.org/log4j/docs/api/org/apache/log4j/PatternLayout.html">javadoc of log4j</a> contains a table with all valid %-characters and their meaning.</p>
+<p>Simple adjust the pattern in the <em>log4j.properties file</em> to get the log format of your choice, for instance</p>
+<div class="codehilite"><pre><span class="n">log4j</span><span class="o">.</span><span class="n">appender</span><span class="o">.</span><span class="n">R</span><span class="o">.</span><span class="n">layout</span><span class="o">.</span><span class="n">ConversionPattern</span><span class="o">=</span><span class="p">[</span><span class="nv">%d</span><span class="p">{</span><span class="n">dd</span><span class="o">.</span><span class="n">MM</span><span class="o">.</span><span class="n">yyyy</span> <span class="n">HH:mm:ss</span><span class="p">}]</span> <span class="nv">%p:</span> <span class="nv">%c</span><span class="p">{</span><span class="mi">1</span><span class="p">}</span><span class="o">.</span><span class="nv">%M</span><span class="p">()</span> <span class="o">-</span> <span class="nv">%m%n</span>
+</pre></div>
+
+
+<p>leads to messages of this form:</p>
+<div class="codehilite"><pre><span class="o">...</span>
+<span class="p">[</span><span class="mf">29.12.2006</span> <span class="mi">13</span><span class="p">:</span><span class="mi">50</span><span class="p">:</span><span class="mi">44</span><span class="p">]</span> <span class="n">INFO:</span> <span class="n">ServerContextFactory</span><span class="o">.</span><span class="n">startLDAP0</span><span class="p">()</span>
+ <span class="o">-</span> <span class="n">Successful</span> <span class="nb">bind</span> <span class="n">of</span> <span class="n">an</span> <span class="n">LDAP</span> <span class="n">Service</span> <span class="p">(</span><span class="mi">636</span><span class="p">)</span> <span class="n">is</span> <span class="n">complete</span><span class="o">.</span>
+<span class="p">[</span><span class="mf">29.12.2006</span> <span class="mi">13</span><span class="p">:</span><span class="mi">50</span><span class="p">:</span><span class="mi">44</span><span class="p">]</span> <span class="n">INFO:</span> <span class="n">Service</span><span class="o">.</span><span class="n">init</span><span class="p">()</span> <span class="o">-</span> <span class="n">server:</span> <span class="n">started</span> <span class="n">in</span> <span class="mi">3016</span> <span class="n">milliseconds</span>
+<span class="o">...</span>
+</pre></div>
+
+
+<p><DIV class="warning" markdown="1">
+<strong> Warning</strong></p>
+<p>"Generating caller location information like with %M or %L is extremely slow. Its use should be avoided unless execution speed is not an issue." (from the log4j documentation)
+</DIV></p>
+<h3 id="advanced-log4j-configuration">Advanced log4j configuration</h3>
+<p>You can take advantage of other features of log4j as well, such as other appenders like the daily rolling file appender. And you can configure logging to make it easier for you to view the messages with tools like Log Factor 5 or <a href="http://logging.apache.org/log4j/docs/chainsaw.html">Chainsaw</a>.</p>
+<p>Learn more about log4j and related tools at its <a href="http://logging.apache.org/log4j/docs/index.html">homepage</a>.</p>
+<h2 id="example-configurations">Example configurations</h2>
+<p>The following example could be used to log all incoming search, add, delete, modify and moddn requests:</p>
+<div class="codehilite"><pre><span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">handlers</span><span class="o">.</span><span class="n">SearchHandler</span><span class="o">=</span><span class="n">DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">handlers</span><span class="o">.</span><span class="n">AddHandler</span><span class="o">=</span><span class="n">DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">handlers</span><span class="o">.</span><span class="n">DeleteHandler</span><span class="o">=</span><span class="n">DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">handlers</span><span class="o">.</span><span class="n">ModifyHandler</span><span class="o">=</span><span class="n">DEBUG</span>
+<span class="n">log4j</span><span class="o">.</span><span class="n">logger</span><span class="o">.</span><span class="n">org</span><span class="o">.</span><span class="n">apache</span><span class="o">.</span><span class="n">directory</span><span class="o">.</span><span class="n">server</span><span class="o">.</span><span class="n">ldap</span><span class="o">.</span><span class="n">handlers</span><span class="o">.</span><span class="n">ModifyDnHandler</span><span class="o">=</span><span class="n">DEBUG</span>
+</pre></div>
+
+
+<h2 id="log-settings-of-the-windows-daemon-process">Log settings of the Windows daemon process</h2>
+<p>After installation on Windows, you have the option to configure the ApacheDS Windows Service (you can do this later as well). If you do so, one option pane is dedicated to logging:</p>
+<p><img alt="Windows service properties" src="images/w32_service_properties.png" /></p>
+<p>You can adjust the logging level and a log path. Note that this is for the daemon only. The server itself is configured as described above.</p>
+<h2 id="resources">Resources</h2>
+<ul>
+<li><a href="http://logging.apache.org/log4j/docs/manual.html">Short introduction to log4j</a></li>
+</ul>
<div class="nav">
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.5-anonymous-access.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.5-anonymous-access.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/1.4.5-anonymous-access.html Mon Oct 29 17:34:42 2012
@@ -118,8 +118,8 @@
</div>
<div class="nav_next">
-
-
+ <a href="1.5-about-sample-configuration.html">1.5. - About the sample configurations and sample directory data </a>
+
</div>
<div class="clearfix"></div>
</div>
@@ -142,8 +142,8 @@
</div>
<div class="nav_next">
-
-
+ <a href="1.5-about-sample-configuration.html">1.5. - About the sample configurations and sample directory data </a>
+
</div>
<div class="clearfix"></div>
</div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/1.5-sample-configuration.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/1.5-sample-configuration.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/1.5-sample-configuration.html Mon Oct 29 17:34:42 2012
@@ -17,7 +17,7 @@
-->
<html>
<head>
- <title>1.4.1 - Changing the server port for LDAP — Apache Directory</title>
+ <title>1.5. - About the sample configurations and sample directory data — Apache Directory</title>
<link href="./../../css/common.css" rel="stylesheet" type="text/css">
<link href="./../../css/green.css" rel="stylesheet" type="text/css">
@@ -108,136 +108,40 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="1-how-to-begin.html">1 - How to begin</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="2-handling-data.html">2 - Handling of data within your directory</a>
</div>
<div class="clearfix"></div>
</div>
-<h1 id="141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</h1>
-<p>This section describes how to change to port for the LDAP protocol. There are two ways to do that : either you use the configuration plugin available in <strong>Apache Directory Studio</strong>, or you update the LDIF partition that contains the configuration.</p>
-<div class="toc">
-<ul>
-<li><a href="#141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</a><ul>
-<li><a href="#the-task-and-how-to-accomplish-it">The task and how to accomplish it</a><ul>
-<li><a href="#using-apache-directory-studio">Using Apache Directory Studio</a><ul>
-<li><a href="#the-server-is-started">The server is started</a></li>
-<li><a href="#the-server-is-not-started">The server is not started</a></li>
-</ul>
-</li>
-<li><a href="#modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</div>
-<h2 id="the-task-and-how-to-accomplish-it">The task and how to accomplish it</h2>
-<p>By default the LDAP server listens on port 10389 (unencrypted or StartTLS) and 10636 (SSL). It is quite common to run LDAP on 389, which is the well-known port for this protocol, but that requires the server to be started with a root user (or with sudo). Of course other options are imaginable as well. Changing the LDAP port is a good example for adjusting the existing Spring configuration as introduced in the last section.</p>
-<p><DIV class="note" markdown="1">
-Due to traditional Unix security restrictions, ports less than 1024 were "trusted". Thus on a Unix-System, a non-root process must listen on a port greater than 1023.
-</DIV></p>
-<p>Basically, there are two cases :
-<em> The server is not started
-</em> The server is started</p>
-<p>We will see how to change the port in those two cases.</p>
-<h3 id="using-apache-directory-studio">Using Apache Directory Studio</h3>
-<h4 id="the-server-is-started">The server is started</h4>
-<p>The best solution is to connect on the server using Studio, and to open it's configuration :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config1.png" />
-</CENTER></p>
-<p>When you select this menu, you will get the main configuration screen, containing the port for LDAP and LDAPS :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>Now, change the values of <em>port</em> to your needs, then save the configuration. You have to restart the server afterwards in order to take this change into effect.</p>
-<h4 id="the-server-is-not-started">The server is not started</h4>
-<p>You can start it and update the configuration, of course. But if you want to configure the server when it's stopped, you will have to load the configuration file, which is on <em>.../instances/default/conf/config.ldif</em>, when the server has been installed using the default setting.</p>
-<p>Opening this file will open the exact same window :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>You can update the <em>ports</em> and save the file.</p>
-<p><DIV class="warning" markdown="1">
- Note that you will requite write access on this file !
-</DIV></p>
-<h3 id="modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</h3>
-<p>All the <strong>ApacheDS</strong> configuration is stored as a LDIF file, and can be modified either using a text editor (although we don't consider this as a safe practice) or using a Modify request on a running server. </p>
-<p><DIV class="info" markdown="1">
- Modifying the configuration on a running server will <strong>not</strong> change the listening port of the running server. You will have to relaunch the server in order to get this new configuration to be available.
-</DIV></p>
-<p>The configuration is stored as a set of LDAP entries, so you can update one of them. In order to modify the entry containing the ports, you have first to find it, and second to send a valid modify request.</p>
-<p>All the <strong>ApacheDS</strong> configuration is stored under the <em>ou=config</em> partition. The ports are stored in some entries under <em>DN: ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config</em> (obviously, dependning on your installation, this DN might change : the <em>ads-directoryServiceId</em> may have a different name, so is the <em>ads-serverId</em>). In any case, the <em>ou=transports</em> branch contains two entries :</p>
-<p>for LDAP :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ad</span>
- <span class="err">s-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10389</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportnbthreads:</span> <span class="err">8</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldap</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>and for LDAPS :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,a</span>
- <span class="err">ds-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10636</span>
-<span class="err">ads-transportenablessl:</span> <span class="err">TRUE</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldaps</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>You just have to send a ModifyRequest using such a LDIF :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,ads</span>
- <span class="err">-directoryServiceId=default,ou=config</span>
-<span class="err">changetype:</span> <span class="err">modify</span>
-<span class="err">replace:</span> <span class="err">ads-systemport</span>
-<span class="err">ads-systemport:</span> <span class="err">10637</span>
-<span class="err">-</span>
-</pre></div>
-
-
-<p>(here, we have modified the LDAPS Port from 10636 to 10637)</p>
-<p>Those modification can be done directly on the <em>config.ldif</em> file, but you won't have any syntax check if you do so.</p>
+<h1 id="15-about-the-sample-configurations-and-sample-directory-data">1.5. - About the sample configurations and sample directory data</h1>
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="1-how-to-begin.html">1 - How to begin</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="2-handling-data.html">2 - Handling of data within your directory</a>
</div>
<div class="clearfix"></div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/3-basic-security.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/3-basic-security.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/3-basic-security.html Mon Oct 29 17:34:42 2012
@@ -17,7 +17,7 @@
-->
<html>
<head>
- <title>1.4.1 - Changing the server port for LDAP — Apache Directory</title>
+ <title>3 - Basic Security — Apache Directory</title>
<link href="./../../css/common.css" rel="stylesheet" type="text/css">
<link href="./../../css/green.css" rel="stylesheet" type="text/css">
@@ -108,136 +108,40 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="2-handling-data.html">2 - Handling of data within your directory</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="../basic-users-guide.html">Basic User Guide</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="4-integrating-apacheds.html">4 - Integrating ApacheDS with other programs</a>
</div>
<div class="clearfix"></div>
</div>
-<h1 id="141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</h1>
-<p>This section describes how to change to port for the LDAP protocol. There are two ways to do that : either you use the configuration plugin available in <strong>Apache Directory Studio</strong>, or you update the LDIF partition that contains the configuration.</p>
-<div class="toc">
-<ul>
-<li><a href="#141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</a><ul>
-<li><a href="#the-task-and-how-to-accomplish-it">The task and how to accomplish it</a><ul>
-<li><a href="#using-apache-directory-studio">Using Apache Directory Studio</a><ul>
-<li><a href="#the-server-is-started">The server is started</a></li>
-<li><a href="#the-server-is-not-started">The server is not started</a></li>
-</ul>
-</li>
-<li><a href="#modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</div>
-<h2 id="the-task-and-how-to-accomplish-it">The task and how to accomplish it</h2>
-<p>By default the LDAP server listens on port 10389 (unencrypted or StartTLS) and 10636 (SSL). It is quite common to run LDAP on 389, which is the well-known port for this protocol, but that requires the server to be started with a root user (or with sudo). Of course other options are imaginable as well. Changing the LDAP port is a good example for adjusting the existing Spring configuration as introduced in the last section.</p>
-<p><DIV class="note" markdown="1">
-Due to traditional Unix security restrictions, ports less than 1024 were "trusted". Thus on a Unix-System, a non-root process must listen on a port greater than 1023.
-</DIV></p>
-<p>Basically, there are two cases :
-<em> The server is not started
-</em> The server is started</p>
-<p>We will see how to change the port in those two cases.</p>
-<h3 id="using-apache-directory-studio">Using Apache Directory Studio</h3>
-<h4 id="the-server-is-started">The server is started</h4>
-<p>The best solution is to connect on the server using Studio, and to open it's configuration :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config1.png" />
-</CENTER></p>
-<p>When you select this menu, you will get the main configuration screen, containing the port for LDAP and LDAPS :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>Now, change the values of <em>port</em> to your needs, then save the configuration. You have to restart the server afterwards in order to take this change into effect.</p>
-<h4 id="the-server-is-not-started">The server is not started</h4>
-<p>You can start it and update the configuration, of course. But if you want to configure the server when it's stopped, you will have to load the configuration file, which is on <em>.../instances/default/conf/config.ldif</em>, when the server has been installed using the default setting.</p>
-<p>Opening this file will open the exact same window :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>You can update the <em>ports</em> and save the file.</p>
-<p><DIV class="warning" markdown="1">
- Note that you will requite write access on this file !
-</DIV></p>
-<h3 id="modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</h3>
-<p>All the <strong>ApacheDS</strong> configuration is stored as a LDIF file, and can be modified either using a text editor (although we don't consider this as a safe practice) or using a Modify request on a running server. </p>
-<p><DIV class="info" markdown="1">
- Modifying the configuration on a running server will <strong>not</strong> change the listening port of the running server. You will have to relaunch the server in order to get this new configuration to be available.
-</DIV></p>
-<p>The configuration is stored as a set of LDAP entries, so you can update one of them. In order to modify the entry containing the ports, you have first to find it, and second to send a valid modify request.</p>
-<p>All the <strong>ApacheDS</strong> configuration is stored under the <em>ou=config</em> partition. The ports are stored in some entries under <em>DN: ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config</em> (obviously, dependning on your installation, this DN might change : the <em>ads-directoryServiceId</em> may have a different name, so is the <em>ads-serverId</em>). In any case, the <em>ou=transports</em> branch contains two entries :</p>
-<p>for LDAP :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ad</span>
- <span class="err">s-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10389</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportnbthreads:</span> <span class="err">8</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldap</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>and for LDAPS :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,a</span>
- <span class="err">ds-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10636</span>
-<span class="err">ads-transportenablessl:</span> <span class="err">TRUE</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldaps</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>You just have to send a ModifyRequest using such a LDIF :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,ads</span>
- <span class="err">-directoryServiceId=default,ou=config</span>
-<span class="err">changetype:</span> <span class="err">modify</span>
-<span class="err">replace:</span> <span class="err">ads-systemport</span>
-<span class="err">ads-systemport:</span> <span class="err">10637</span>
-<span class="err">-</span>
-</pre></div>
-
-
-<p>(here, we have modified the LDAPS Port from 10636 to 10637)</p>
-<p>Those modification can be done directly on the <em>config.ldif</em> file, but you won't have any syntax check if you do so.</p>
+<h1 id="3-basic-security">3 - Basic Security</h1>
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="2-handling-data.html">2 - Handling of data within your directory</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="../basic-users-guide.html">Basic User Guide</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="4-integrating-apacheds.html">4 - Integrating ApacheDS with other programs</a>
</div>
<div class="clearfix"></div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/3.1-authentication-options.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/3.1-authentication-options.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/3.1-authentication-options.html Mon Oct 29 17:34:42 2012
@@ -17,7 +17,7 @@
-->
<html>
<head>
- <title>1.4.1 - Changing the server port for LDAP — Apache Directory</title>
+ <title>3.1 - Authentication options — Apache Directory</title>
<link href="./../../css/common.css" rel="stylesheet" type="text/css">
<link href="./../../css/green.css" rel="stylesheet" type="text/css">
@@ -108,136 +108,40 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3-basic-security.html">3 - Basic Security</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="3.2-basic-authorization.html">3.2 - Basic authorization</a>
</div>
<div class="clearfix"></div>
</div>
-<h1 id="141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</h1>
-<p>This section describes how to change to port for the LDAP protocol. There are two ways to do that : either you use the configuration plugin available in <strong>Apache Directory Studio</strong>, or you update the LDIF partition that contains the configuration.</p>
-<div class="toc">
-<ul>
-<li><a href="#141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</a><ul>
-<li><a href="#the-task-and-how-to-accomplish-it">The task and how to accomplish it</a><ul>
-<li><a href="#using-apache-directory-studio">Using Apache Directory Studio</a><ul>
-<li><a href="#the-server-is-started">The server is started</a></li>
-<li><a href="#the-server-is-not-started">The server is not started</a></li>
-</ul>
-</li>
-<li><a href="#modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</div>
-<h2 id="the-task-and-how-to-accomplish-it">The task and how to accomplish it</h2>
-<p>By default the LDAP server listens on port 10389 (unencrypted or StartTLS) and 10636 (SSL). It is quite common to run LDAP on 389, which is the well-known port for this protocol, but that requires the server to be started with a root user (or with sudo). Of course other options are imaginable as well. Changing the LDAP port is a good example for adjusting the existing Spring configuration as introduced in the last section.</p>
-<p><DIV class="note" markdown="1">
-Due to traditional Unix security restrictions, ports less than 1024 were "trusted". Thus on a Unix-System, a non-root process must listen on a port greater than 1023.
-</DIV></p>
-<p>Basically, there are two cases :
-<em> The server is not started
-</em> The server is started</p>
-<p>We will see how to change the port in those two cases.</p>
-<h3 id="using-apache-directory-studio">Using Apache Directory Studio</h3>
-<h4 id="the-server-is-started">The server is started</h4>
-<p>The best solution is to connect on the server using Studio, and to open it's configuration :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config1.png" />
-</CENTER></p>
-<p>When you select this menu, you will get the main configuration screen, containing the port for LDAP and LDAPS :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>Now, change the values of <em>port</em> to your needs, then save the configuration. You have to restart the server afterwards in order to take this change into effect.</p>
-<h4 id="the-server-is-not-started">The server is not started</h4>
-<p>You can start it and update the configuration, of course. But if you want to configure the server when it's stopped, you will have to load the configuration file, which is on <em>.../instances/default/conf/config.ldif</em>, when the server has been installed using the default setting.</p>
-<p>Opening this file will open the exact same window :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>You can update the <em>ports</em> and save the file.</p>
-<p><DIV class="warning" markdown="1">
- Note that you will requite write access on this file !
-</DIV></p>
-<h3 id="modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</h3>
-<p>All the <strong>ApacheDS</strong> configuration is stored as a LDIF file, and can be modified either using a text editor (although we don't consider this as a safe practice) or using a Modify request on a running server. </p>
-<p><DIV class="info" markdown="1">
- Modifying the configuration on a running server will <strong>not</strong> change the listening port of the running server. You will have to relaunch the server in order to get this new configuration to be available.
-</DIV></p>
-<p>The configuration is stored as a set of LDAP entries, so you can update one of them. In order to modify the entry containing the ports, you have first to find it, and second to send a valid modify request.</p>
-<p>All the <strong>ApacheDS</strong> configuration is stored under the <em>ou=config</em> partition. The ports are stored in some entries under <em>DN: ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config</em> (obviously, dependning on your installation, this DN might change : the <em>ads-directoryServiceId</em> may have a different name, so is the <em>ads-serverId</em>). In any case, the <em>ou=transports</em> branch contains two entries :</p>
-<p>for LDAP :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ad</span>
- <span class="err">s-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10389</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportnbthreads:</span> <span class="err">8</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldap</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>and for LDAPS :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,a</span>
- <span class="err">ds-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10636</span>
-<span class="err">ads-transportenablessl:</span> <span class="err">TRUE</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldaps</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>You just have to send a ModifyRequest using such a LDIF :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,ads</span>
- <span class="err">-directoryServiceId=default,ou=config</span>
-<span class="err">changetype:</span> <span class="err">modify</span>
-<span class="err">replace:</span> <span class="err">ads-systemport</span>
-<span class="err">ads-systemport:</span> <span class="err">10637</span>
-<span class="err">-</span>
-</pre></div>
-
-
-<p>(here, we have modified the LDAPS Port from 10636 to 10637)</p>
-<p>Those modification can be done directly on the <em>config.ldif</em> file, but you won't have any syntax check if you do so.</p>
+<h1 id="31-authentication-options">3.1 - Authentication options</h1>
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3-basic-security.html">3 - Basic Security</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="3.2-basic-authorization.html">3.2 - Basic authorization</a>
</div>
<div class="clearfix"></div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/3.2-basic-authorization.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/3.2-basic-authorization.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/3.2-basic-authorization.html Mon Oct 29 17:34:42 2012
@@ -17,7 +17,7 @@
-->
<html>
<head>
- <title>1.4.1 - Changing the server port for LDAP — Apache Directory</title>
+ <title>3.2 - Basic authorization — Apache Directory</title>
<link href="./../../css/common.css" rel="stylesheet" type="text/css">
<link href="./../../css/green.css" rel="stylesheet" type="text/css">
@@ -108,136 +108,40 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3.1-authentication-options.html">3.1 - Authentication options</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="3.3-enabling-ssl.html">3.3 - How to enable SSL</a>
</div>
<div class="clearfix"></div>
</div>
-<h1 id="141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</h1>
-<p>This section describes how to change to port for the LDAP protocol. There are two ways to do that : either you use the configuration plugin available in <strong>Apache Directory Studio</strong>, or you update the LDIF partition that contains the configuration.</p>
-<div class="toc">
-<ul>
-<li><a href="#141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</a><ul>
-<li><a href="#the-task-and-how-to-accomplish-it">The task and how to accomplish it</a><ul>
-<li><a href="#using-apache-directory-studio">Using Apache Directory Studio</a><ul>
-<li><a href="#the-server-is-started">The server is started</a></li>
-<li><a href="#the-server-is-not-started">The server is not started</a></li>
-</ul>
-</li>
-<li><a href="#modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</div>
-<h2 id="the-task-and-how-to-accomplish-it">The task and how to accomplish it</h2>
-<p>By default the LDAP server listens on port 10389 (unencrypted or StartTLS) and 10636 (SSL). It is quite common to run LDAP on 389, which is the well-known port for this protocol, but that requires the server to be started with a root user (or with sudo). Of course other options are imaginable as well. Changing the LDAP port is a good example for adjusting the existing Spring configuration as introduced in the last section.</p>
-<p><DIV class="note" markdown="1">
-Due to traditional Unix security restrictions, ports less than 1024 were "trusted". Thus on a Unix-System, a non-root process must listen on a port greater than 1023.
-</DIV></p>
-<p>Basically, there are two cases :
-<em> The server is not started
-</em> The server is started</p>
-<p>We will see how to change the port in those two cases.</p>
-<h3 id="using-apache-directory-studio">Using Apache Directory Studio</h3>
-<h4 id="the-server-is-started">The server is started</h4>
-<p>The best solution is to connect on the server using Studio, and to open it's configuration :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config1.png" />
-</CENTER></p>
-<p>When you select this menu, you will get the main configuration screen, containing the port for LDAP and LDAPS :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>Now, change the values of <em>port</em> to your needs, then save the configuration. You have to restart the server afterwards in order to take this change into effect.</p>
-<h4 id="the-server-is-not-started">The server is not started</h4>
-<p>You can start it and update the configuration, of course. But if you want to configure the server when it's stopped, you will have to load the configuration file, which is on <em>.../instances/default/conf/config.ldif</em>, when the server has been installed using the default setting.</p>
-<p>Opening this file will open the exact same window :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>You can update the <em>ports</em> and save the file.</p>
-<p><DIV class="warning" markdown="1">
- Note that you will requite write access on this file !
-</DIV></p>
-<h3 id="modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</h3>
-<p>All the <strong>ApacheDS</strong> configuration is stored as a LDIF file, and can be modified either using a text editor (although we don't consider this as a safe practice) or using a Modify request on a running server. </p>
-<p><DIV class="info" markdown="1">
- Modifying the configuration on a running server will <strong>not</strong> change the listening port of the running server. You will have to relaunch the server in order to get this new configuration to be available.
-</DIV></p>
-<p>The configuration is stored as a set of LDAP entries, so you can update one of them. In order to modify the entry containing the ports, you have first to find it, and second to send a valid modify request.</p>
-<p>All the <strong>ApacheDS</strong> configuration is stored under the <em>ou=config</em> partition. The ports are stored in some entries under <em>DN: ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config</em> (obviously, dependning on your installation, this DN might change : the <em>ads-directoryServiceId</em> may have a different name, so is the <em>ads-serverId</em>). In any case, the <em>ou=transports</em> branch contains two entries :</p>
-<p>for LDAP :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ad</span>
- <span class="err">s-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10389</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportnbthreads:</span> <span class="err">8</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldap</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>and for LDAPS :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,a</span>
- <span class="err">ds-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10636</span>
-<span class="err">ads-transportenablessl:</span> <span class="err">TRUE</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldaps</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>You just have to send a ModifyRequest using such a LDIF :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,ads</span>
- <span class="err">-directoryServiceId=default,ou=config</span>
-<span class="err">changetype:</span> <span class="err">modify</span>
-<span class="err">replace:</span> <span class="err">ads-systemport</span>
-<span class="err">ads-systemport:</span> <span class="err">10637</span>
-<span class="err">-</span>
-</pre></div>
-
-
-<p>(here, we have modified the LDAPS Port from 10636 to 10637)</p>
-<p>Those modification can be done directly on the <em>config.ldif</em> file, but you won't have any syntax check if you do so.</p>
+<h1 id="32-basic-authorization">3.2 - Basic authorization</h1>
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3.1-authentication-options.html">3.1 - Authentication options</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="3.3-enabling-ssl.html">3.3 - How to enable SSL</a>
</div>
<div class="clearfix"></div>
Modified: websites/staging/directory/trunk/content/apacheds/basic-ug/3.3-enabling-ssl.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/basic-ug/3.3-enabling-ssl.html (original)
+++ websites/staging/directory/trunk/content/apacheds/basic-ug/3.3-enabling-ssl.html Mon Oct 29 17:34:42 2012
@@ -17,7 +17,7 @@
-->
<html>
<head>
- <title>1.4.1 - Changing the server port for LDAP — Apache Directory</title>
+ <title>3.3 - How to enable SSL — Apache Directory</title>
<link href="./../../css/common.css" rel="stylesheet" type="text/css">
<link href="./../../css/green.css" rel="stylesheet" type="text/css">
@@ -108,136 +108,40 @@
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3.2-basic-authorization.html">3.2 - Basic authorization</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="4-integrating-apacheds.html">4 - Integrating ApacheDS with other programs</a>
</div>
<div class="clearfix"></div>
</div>
-<h1 id="141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</h1>
-<p>This section describes how to change to port for the LDAP protocol. There are two ways to do that : either you use the configuration plugin available in <strong>Apache Directory Studio</strong>, or you update the LDIF partition that contains the configuration.</p>
-<div class="toc">
-<ul>
-<li><a href="#141-changing-the-server-port-for-ldap">1.4.1 - Changing the server port for LDAP</a><ul>
-<li><a href="#the-task-and-how-to-accomplish-it">The task and how to accomplish it</a><ul>
-<li><a href="#using-apache-directory-studio">Using Apache Directory Studio</a><ul>
-<li><a href="#the-server-is-started">The server is started</a></li>
-<li><a href="#the-server-is-not-started">The server is not started</a></li>
-</ul>
-</li>
-<li><a href="#modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</a></li>
-</ul>
-</li>
-</ul>
-</li>
-</ul>
-</div>
-<h2 id="the-task-and-how-to-accomplish-it">The task and how to accomplish it</h2>
-<p>By default the LDAP server listens on port 10389 (unencrypted or StartTLS) and 10636 (SSL). It is quite common to run LDAP on 389, which is the well-known port for this protocol, but that requires the server to be started with a root user (or with sudo). Of course other options are imaginable as well. Changing the LDAP port is a good example for adjusting the existing Spring configuration as introduced in the last section.</p>
-<p><DIV class="note" markdown="1">
-Due to traditional Unix security restrictions, ports less than 1024 were "trusted". Thus on a Unix-System, a non-root process must listen on a port greater than 1023.
-</DIV></p>
-<p>Basically, there are two cases :
-<em> The server is not started
-</em> The server is started</p>
-<p>We will see how to change the port in those two cases.</p>
-<h3 id="using-apache-directory-studio">Using Apache Directory Studio</h3>
-<h4 id="the-server-is-started">The server is started</h4>
-<p>The best solution is to connect on the server using Studio, and to open it's configuration :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config1.png" />
-</CENTER></p>
-<p>When you select this menu, you will get the main configuration screen, containing the port for LDAP and LDAPS :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>Now, change the values of <em>port</em> to your needs, then save the configuration. You have to restart the server afterwards in order to take this change into effect.</p>
-<h4 id="the-server-is-not-started">The server is not started</h4>
-<p>You can start it and update the configuration, of course. But if you want to configure the server when it's stopped, you will have to load the configuration file, which is on <em>.../instances/default/conf/config.ldif</em>, when the server has been installed using the default setting.</p>
-<p>Opening this file will open the exact same window :</p>
-<p><CENTER>
-<img alt="Studio port configuration" src="images/studio-port-config2.png" />
-</CENTER></p>
-<p>You can update the <em>ports</em> and save the file.</p>
-<p><DIV class="warning" markdown="1">
- Note that you will requite write access on this file !
-</DIV></p>
-<h3 id="modifying-the-configuration-ldif-partition">Modifying the configuration LDIF partition</h3>
-<p>All the <strong>ApacheDS</strong> configuration is stored as a LDIF file, and can be modified either using a text editor (although we don't consider this as a safe practice) or using a Modify request on a running server. </p>
-<p><DIV class="info" markdown="1">
- Modifying the configuration on a running server will <strong>not</strong> change the listening port of the running server. You will have to relaunch the server in order to get this new configuration to be available.
-</DIV></p>
-<p>The configuration is stored as a set of LDAP entries, so you can update one of them. In order to modify the entry containing the ports, you have first to find it, and second to send a valid modify request.</p>
-<p>All the <strong>ApacheDS</strong> configuration is stored under the <em>ou=config</em> partition. The ports are stored in some entries under <em>DN: ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ads-directoryServiceId=default,ou=config</em> (obviously, dependning on your installation, this DN might change : the <em>ads-directoryServiceId</em> may have a different name, so is the <em>ads-serverId</em>). In any case, the <em>ou=transports</em> branch contains two entries :</p>
-<p>for LDAP :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldap,ou=transports,ads-serverId=ldapServer,ou=servers,ad</span>
- <span class="err">s-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10389</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportnbthreads:</span> <span class="err">8</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldap</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>and for LDAPS :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,a</span>
- <span class="err">ds-directoryServiceId=default,ou=config</span>
-<span class="err">ads-systemport:</span> <span class="err">10636</span>
-<span class="err">ads-transportenablessl:</span> <span class="err">TRUE</span>
-<span class="err">ads-enabled:</span> <span class="err">TRUE</span>
-<span class="err">ads-transportaddress:</span> <span class="err">0.0.0.0</span>
-<span class="err">ads-transportid:</span> <span class="err">ldaps</span>
-<span class="err">object</span><span class="kd">class</span><span class="err">:</span> <span class="err">ads-transport</span>
-<span class="err">objectclass:</span> <span class="err">ads-tcpTransport</span>
-<span class="err">objectclass:</span> <span class="err">ads-base</span>
-<span class="err">objectclass:</span> <span class="err">top</span>
-</pre></div>
-
-
-<p>You just have to send a ModifyRequest using such a LDIF :</p>
-<div class="codehilite"><pre><span class="err">dn:</span> <span class="err">ads-transportid=ldaps,ou=transports,ads-serverId=ldapServer,ou=servers,ads</span>
- <span class="err">-directoryServiceId=default,ou=config</span>
-<span class="err">changetype:</span> <span class="err">modify</span>
-<span class="err">replace:</span> <span class="err">ads-systemport</span>
-<span class="err">ads-systemport:</span> <span class="err">10637</span>
-<span class="err">-</span>
-</pre></div>
-
-
-<p>(here, we have modified the LDAPS Port from 10636 to 10637)</p>
-<p>Those modification can be done directly on the <em>config.ldif</em> file, but you won't have any syntax check if you do so.</p>
+<h1 id="33-how-to-enable-ssl">3.3 - How to enable SSL</h1>
<div class="nav">
<div class="nav_prev">
-
-
+ <a href="3.2-basic-authorization.html">3.2 - Basic authorization</a>
+
</div>
<div class="nav_up">
- <a href="1.4-basic-configuration-tasks.html">1.4 - Basic configuration tasks</a>
+ <a href="3-basic-security.html">3 - Basic Security</a>
</div>
<div class="nav_next">
- <a href="1.4.2-changing-admin-password.html">1.4.2 - Changing the admin password</a>
+ <a href="4-integrating-apacheds.html">4 - Integrating ApacheDS with other programs</a>
</div>
<div class="clearfix"></div>