Agragate multiple Directory Databases

I'm in the process of designing a new security architecture based on Sun One Directory Server.
I don't know whether the following is possible. So, If not, please, tell me whether there are alternatives
1. I have 4 departemental Unix systems. Each one will host a Directory Server for authentication + authorizations for applications.
2 In central, I will have a large Unix hosting also a Directory Server.
What I'd like to do is to replicate (fractional replications) databases located in departemental sites to the Unique Database of the central site.
I'd like also define also 2 classes of administrator depending on attributes. Let me explain :
Each people would have 2 sets of attributes :
a) the local administrator would be granted to modify one set of attibutes only
b) the central system adminsitrator would be granted to modify the second set of attibutes
However, it would be of the local administrator responsibility to define,and delete users entries.
If the above is not possible, I thought of another solution .
1. A local administrator adds, modifies or deletes a user entry
2. This entry is exported in LDIF format and sent to the central site (by FTP) for exemple.
3. A script processes this LDIF file to remove un-necessary attributes and add others
4. finaly this new LDIF file is processed by the central Directory Server
Did someone already implement and automat such a scenario.
Thanks in advance

Hi,
1. I have 4 departemental Unix systems. Each one
will host a Directory Server for authentication +
authorizations for applications.
2 In central, I will have a large Unix hosting also
a Directory Server.
What I'd like to do is to replicate (fractional
replications) databases located in departemental
sites to the Unique Database of the central site.
I'd like also define also 2 classes of administrator
depending on attributes. Let me explain :
Each people would have 2 sets of attributes :
a) the local administrator would be granted
ted to modify one set of attibutes only
b) the central system adminsitrator would be
be granted to modify the second set of attibutes
However, it would be of the local administrator
responsibility to define,and delete users entries.I don't why the above could not work. Of course, your plan assumes that the central server will not replicate anything back to the local servers.
Bertold

Similar Messages

  • Multiple IQ databases on one host ---- NLS for BW-HANA

    Hi, 
    We are planning to build a Sybase IQ NLS landscape to support BW on HANA landscapes.
    We have thought of installing DEV/QA NLS (IQ) on one server and accordingly have created the file systems on the Linux host. My question is whether we have to install sybase IQ 16 SP8 PL27 twice on the server to have two seperate $SYBASE install directories, from which we can source the environmenmt profiles while launching each of these databases.
    The FS layout is as follows --- All FS's will be owned by sybase (2 sets of FS will be created with SIDs for DEV and QAS)
    /usr/sap/SID/sybase ------------- sybase install dir
    /usr/sap/SID/database -------- catalog DB
    /usr/sap/SID/main -------------- IQ_SYSTEM_TEMP
    /usr/sap/SID/log -- ---- Transaction logs and other system logs  ----- Can the transaction log be stored here for Point in Time Recovery?
    /usr/sap/SID/messages --------- messages
    /usr/sap/SID/html ---------- html query plans
    /usr/sap/SID/sapdata1 to /usr/sap/SID/sapdata4 --- for iq db spaces (user db spaces)
    /usr/sap/SID/temp/temp1 to /usr/sap/SID/temp/temp4 --- for iqtmp spaces  (both the sapdatax and tempx have same sizes)
    Question ---- can the base directory /usr/sap/SID/temp become the IQTMP16 and will it access the other file systems (temp1, temp2 and so on) undreneath it or do we have to just create one file system - /usr/sap/SID/temp?
    /usr/sap/SID/tmp ----- path for -dt option in the config file to store server dependant files. - I am not sure what this -dt stands for and how different is it from iqtmp FS (usr/sap/SID/temp....)
    Question - In the First Guidance guide, this filesystem is mentioned as (IQ for Sort)... Does /usr/sap/SID/temp (iqtmp) and /usr/sap/SID/tmp (.tmp) have same sizes?
    Question - Does the /usr/sap/SID/sapdata, /usr/sap/SID/temp and /usr/sap/SID/tmp have same sizes?
    We will install DEV under /usr/sap/DEV/sybase and configure it to use the above file systems. Similarly, we will have filesystems for QAS but the install will begin from /usr/sap/QAS/sybase.....
    Is it a viable way of installting multiple NLS databases on one server?
    Please help....

    already answered here - http://scn.sap.com/thread/3717450

  • Load Data from a table on one server's database, to the same table structure in multiple server databases

    Hi,
    I have a situation where i have to load data from one server/database table to multiple servers/databases.
    Example:
    I need to load data from dbo.TABLE_A  (on Server: Server_A & Database: Database_A)  to the same table on the list of server databases like
    Server: Server_B , Database: Database_B
    Server: Server_C , Database: Database_C
    Server: Server_D , Database: Database_D
    Server: Server_E , Database: Database_E
    Server: Server_F , Database: Database_F
    Server: Server_G , Database: Database_G
    Server: Server_H , Database: Database_H
    so on and so forth on 250 such server database combinations.
    The table structure is the same on all the servers.
    If i make the source or destination dynamic, it throws an error while mapping ?
    I cannot get Linked server permissions and SQL Server Config thing doesn't work as well.
    Please suggest on how to load data from one source to multiple server/databases.
    Thank you.

    I just need to transfer one table's data. its like i have to use a query to pick data for
    the most recent data. So i use something like, select A, B, C, D from dbo.table where ETL_TIMESTAMP > (the max(etltimestamp) in the destination on different server). There are no foreign key relationships and the data should not be truncated. it just had
    to append the new records.

  • To pick files from multiple directory in FILE ADAPTER

    Hi all,
    Is their any settings or adapter configuration parameters to be used  to pick  the files from multiple directory .

    Hi,
    You can only specify one directory on the communication channel. The advance selection allows the selection of different files within this directory.
    Therefore you will need a communication channel for each directory you wish to pull files from.
    (Just looked at the blog and see it is possible after all - I'm on the wrong SP)
    Kind regards
    Colin.
    Message was edited by:
            Colin Bickell

  • Multiple Stickies databases? Open a few Stickies only per application?

    I love Stickies, but I hate having so many open at the same time. It's always the case that I need only a few stickies at a time, depending on the other apps I'm working on. For example, I might have a few "tips" stickies I created for myself when I am Photoshopping, or a couple other brainstorm stickies when I am trying to do some writing. I might have a dozen subsets of stickies that need to be opened up only when the relevant application is also open. I will never need all my stickies open all the time.
    My questions are whether it's possible to:
    a) create multiple Stickies databases which each contain only a small set of Stickie notes; and/or
    b) to have only a few Sticky notes opened up automatically depending on the app I am using. (Is there some sort of Applescript that could help with this?)
    As it is now my screen is far too cluttered, and that discourages any use of Stickies at all.
    Perhaps I've been ignoring some obvious feature, but in fact, I couldn't find this issue mentioned anywhere else.
    Any ideas? Thanks!

    Hi,
    For question 1, by using powershell:
    http://blogs.msdn.com/b/rslaten/archive/2013/07/21/get-all-overrides-in-a-scom-2012-management-group-using-powershell.aspx
    How to get overrides that are in a particular management pack for a group
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/fb1893ff-a88f-4758-81f0-5a3c3f702ba2/how-to-get-overrides-that-are-in-a-particular-management-pack-for-a-group?forum=operationsmanagerextensibility
    For question
    2: we can use powershell command Get-SCOMNotificationSubscription, below is a similar thread:
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/28d9595a-6de3-4a12-a0fa-b794f60a5a48/scom-how-to-get-a-report-or-file-with-all-subscription-criteria?forum=operationsmanagerreporting
    Regards, Yan Li

  • Multiple source databases

    Hello,
    I need to load data into dimensions and cube from multiple source databases. We have separate transaction databases for each country, but data must be loaded into common target schema. At the moment we have created mappings which loads data from one source database.
    What is the best way to populate, for example customers dimension from customers transaction tables (located in multiple source databases) if business identifiers can overlap?

    I would break this up into two pieces: the load from the source systems into the staging area, and then the load from the staging area into the target table, which you mentioned was a dimension.
    There is no reason you would have to use views or synonyms if you don't want to. You could approach this either with a SET operator, in this case a union, that brought all the sources together into the staging table. However, I would likely create multiple mappings for each source system. I would create a mapping for each table that you have to pull data from, and then create a separate process flow that controls all the tables being pulled from a particular source database. This allows you to schedule the extractions from the source systems independently of each other in case they need to run at different times. The end result of all of this will be a series of staging tables that are loaded from source tables from all the different locations. For each of the singular mappings, I would create a constant that defined the source of the data for this mapping, and load that constant into a column called SOURCE_SYSTEM, or perhaps COUNTRY, as you mentioned. Then, this SOURCE_SYSTEM/COUNTRY column + SOURCE_SYSTEM_ID would serve as the natural key.
    You can choose to persist these tables (as an ODS of sorts) or not... that is up to you and your requirements.
    Finally, I would create a single mapping that loads the final target table from the single staging table.
    Let me know if this doesn't make sense.
    Regards,
    Stewart Bryson

  • Multiple tempdb databases

    Is it possible to create multiple tempdb databases in SQL Server 2012 enterprise edition 64 bit on windows server 2012 data center edition 64 bit.

    Hello,
    You should create 4 or 2 tempdb file per core/processor as explained on the following article:
    http://www.sqlskills.com/blogs/paul/a-sql-server-dba-myth-a-day-1230-tempdb-should-always-have-one-data-file-per-processor-core/
    Hope this helps.
    Regards,
    Alberto Morillo
    SQLCoffee.com

  • Multiple Archive databases

    I can split out multiple archive databases just like I split out multiple primary databases on Exch 2013, correct?
    Thank you.

    Hi,
    Do you mean you want to split one archive database into multiple archive databases? If so, you can move some archive mailboxes from one archive database to another archive database using the New-MoveRequest command.
    If I have misunderstood your concern, please feel free to let me know. For more details about the New-MoveRequest command, please refer to
    New-MoveRequest.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Question on installing Multiple Directory Servers

    Hello All,
    I seem to be having a problem installing multiple directory servers, and I was hoping that somebody could help me. Here is what I am trying to do:
    I install DS 2005Q4 on HostA. I have it be the User/Group and Configuration Server. This install goes ok and I can use the administration server and console to manage the servers.
    I then go to HostB and install DS 2005Q4 and tell it to use the configuration server on HOSTA. I use the the passwords for Admin and Directory Manager and tell it to store User/Group information. I also install the admistration server.
    The problem is when I go to manage this second ldap server throught either administration server it tells me that I have insufficient rights. That is if I click on the configuration tab and try and look at anything.
    The second adminsitration server can see and manage the DS on HOSTA fine, but not the DS on HostB. The same thing goes for the administration server on HostA. It can manage the DS on HostA but not the DS on HostB. It keeps saying insufficient rights.
    The end goal is to setup these DS in multimaster replication and have the o=netscaperoot replicated to HostB.
    I am sure I must be doing something stupid, but I have banged my head on the wall all week and I thought I would see if somebody had any suggestions.
    The hardware is a pair of v210's with 4GB of memory and I am running Solaris 10 01/06 fully patched.
    Thanks for any help,
    Gary

    just for completness, when you have installed the consumer, you have manually started the admin server up haven't you??? if not, do so!
    also ensure that the host file holds the correct IP and host/host domain name.
    ensure you can contact the config server from your consumer etc.
    ensure you can connect to the consumer from the config server etc.
    if using the GUI from a machine other than the config server, ie pc based. ensure connectivity and host look up is acheivable from the PC.
    HTH

  • 9300 synchronization of multiple contact databases...

    I currently use multiple Contact databases on my 9300, such as "professional" and "personal" databases. The default one is systematically synchronized through the PC Suite into my outlook/contact database, but I know how to synchronize the other and make it go to outlook/contact2 database. Any hint would be welcome. Thanks

    Hi nadjibnet,
    According to your description, you want to use SQL Server replication to sync the SQL Server Express database and LocalDB database. From the comparison of SQL Server Express and LocalDB, LocalDB is the full SQL Server Express engine, but invoked directly
    from the client provider. It not support subscriber for merge replication. However, you need to sync database in both directions. Only merge replication can merges incremental data changes that occurred at the Publisher or Subscribers after the initial snapshot
    was created, and detects and resolves any conflicts according to rules you configure.
    So personally, I recommend you use synchronize among SQL Server Express , LocalDB databases by using Microsoft Sync Framework.
    Sync Framework includes classes that can be adapted to synchronize between a SQL Server database and any other database that is compatible with ADO.NET. For detailed documentation of the Sync Framework database synchronization components, see
    Synchronizing Databases. For a comparison between Sync Framework and Merge Replication, see
    Synchronizing Databases Overview.
    Regards,
    Sofiya Li
    Sofiya Li
    TechNet Community Support

  • Multiple standby database about FAL_SERVER and FAL_CLIENT parameter in DG

    Hi,
    I am little bit confused about FAL_SERVER and FAL_CLIENT parameter in Data Guard.
    We are planning to configure multiple standby database in Data Guard environment. Let Assume that, i have production db named as 'PROD' and multiple standby name like standby1,standby2, standby3.
    My Environment is:_
    DB Version: 11.2.0.1
    OS Version: OE5LU6
    So in this case how to specify above Net service name in spfile on production server and also on other standby server.
    Kindly Suggests me.
    Regards
    Athish

    Athish wrote:
    Hi,
    I am little bit confused about FAL_SERVER and FAL_CLIENT parameter in Data Guard.
    We are planning to configure multiple standby database in Data Guard environment. Let Assume that, i have production db named as 'PROD' and multiple standby name like standby1,standby2, standby3.
    My Environment is:_
    DB Version: 11.2.0.1
    OS Version: OE5LU6
    So in this case how to specify above Net service name in spfile on production server and also on other standby server.
    Kindly Suggests me.
    Regards
    AthishFAL_CLIENT is Oracle TNS service of the local system and FAL_SERVER is Oracle TNS service of remote system.
    if you have three standby databases of primary , then from primary you must have three values in FAL_SERVER so that archives will be send to the all destinations.
    and From the stadnby database, FAL_SERVER should be the oracle TNS service where you receiving the archive log files,
    Note:- If you have RAC primary then mention each service differentiated by commas as shown example below.
    From standby to Primary RAC:- FAL_SAERVER='PROD1','PROD2'
    These parameters are dynamic, so that you can alter them at any time.
    HTH.

  • ACS SE multiple windows databases

    Hi there
    is it possible to have multiple windows databases on an ACS SE? The problem is, that we need access to two differen domains, that are not trusted and have no super domain.
    Thanks a lot and best regards
    Dominic

    Hi,
    We would require two way external/transitive trust between the two domains.
    There are 2 ways to work around our problem:
    1. Install another ACS at the remote site/domain and forward all the
    requests for the users of remote domain to that ACS.
    2. Configure partner domain as LDAP on the ACS (at corp site), this should not require domain trust. The only problem we will have certain authentication methods will not be supported when using ldap.
    Here is the complete list of stuff which is supported with LDAP:
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server​_for_windows/4.1/user/Overvw.html#wp824733​
    Hope that helps!
    Regards,
    ~JG
    Do rate helpful posts

  • External directory database link for CME 4.0

    Is it possible to link CME 4.0 with external phone directory database?
    Thanks
    AD

    Yes, you can use an external database for your Corporate Directory on the ip phones, such as an enterprise LDAP directory. See the below link for more info:
    http://www.cisco.com/univercd/cc/td/doc/product/voice/c_callmg/4_0/sys_ad/4_0_1/ccmsys/a04ldap.htm
    Please rate helpful posts!

  • Multiple iPhoto databases on 1 mac?

    is there a way to have more than 1 iPhoto database on a computer?
    for example, if i want to have on my mac at work 2 different database files, one work related photos and another for personal photos. i would like to have a separate database for selected photos from my home computer, say a vacation trip... i don't want to have 1 iPhoto database with both work picture and personal pictures mix in the same database...
    another way to think of this is like the following... if i set up an album, is it possible to save/export an album out of the main iPhoto database and save it to another iPhoto database on the same computer?
    when i get jpgs, even at work, i normally store the jpgs in the folder with the project that they are associated with... i never use iPhoto because i prefer to keep the photos local to the particular project or topic that the belong to... for me, keeping all photos in 1 location is like organizing my mac filing system so that all of my excel files are in 1 directory on my computer, regardless of what project the excel files pertain to... when i'm working on a project, then all files are in the same location, the project folder... when i archive a project, then all the files, including the jpgs, get archived with that folder... if i transfer that project to someone else, then they get all files for that project... and i can remove that project from my computer since it is archived onto a disk or external hard drive...
    another example is how filemaker works. i can make as many copies of a filemaker database as i want in and save each copy in a different location on my computer... i don't have the clutter of all the data unrelated to the project i'm working on in that file mixed in with the project for that folder... so i can keep a database for each project with only the data for that project, and that database gets archived, transferred, and removed with the project folder... if i update the database, i don't have to work on updating data from old projects that i'm not working on any more... if i'm working with someone on the database for a specific project, we don't have to filter out data from all the other projects...
    if iPhoto doesn't allow this, is there other photo library software that does do this? my needs are very basic, only need date, title, maybe tags/keywords, or notes, and the ability to search these fields... i have no need to manipulate or edit the jpegs... no slide shows, no music, no book making...
    thanks for any suggestions...

    As Larry says, multiple libraries are easy and available.
    another way to think of this is like the following... if i set up an album, is it possible to save/export an album out of the main iPhoto database and save it to another iPhoto database on the same computer?
    To move pics/albums/events between Libraries you’ll need iPhoto Library Manager.
    Regards
    TD

  • Can I create a directory database in Numbers, like I have done in Access?

    I have a database in Access that I converted to numbers for the data, but I want to create a directory with merge fields so that its easier to read and pretty to look at. Can this be done in Numbers or Pages? or is there another program comparable to Microsoft Access that I need to get. Is there freeware that would do the trick? thanks.

    thanks for offering your help. I have about 120 contacts in one database with about 20 fields for each contact: name, phn, birthday, anniv, email, address, hobbies, heritage, etc. I guess about 5 or 6 contacts would fit on a page.
    I also have another database that is quite smaller. only about 68 contacts, with just 9 or 10 fields per contact. Last Name, First Name, Unit, Home Phone, Cell Phone, EMail Address, Alt Email, Alt Cell Phone, Additional. I would like the option to add fields as this document grows.
    I searched online for some database management software but it seems that you need to know programing. I inherited the access database listed first so I only had to tweek things, copy and paste fields, I did not have to create it from scratch. Am I looking for the wrong type of program? Is there a program out there that makes simple directories? Or is there an easy way to create a merge document (In Pages or Numbers) to have multiple contacts on one page. Like a label? I am able to create a merge form letter, but can not figure out how to get multiple contacts on a page. I am not planning to give up on my Mac. I am committed to is as I have spent a few thousand dollars to get this, But I just need to know how to get started.
    Thanks again for your help. Toni

Maybe you are looking for

  • Manual Budget Entry for COPA

    Hi, We are using COPA for budgeting operating expense. Our cost will be budgeted by cost center, product and region. At the GL level, it is a combination of cost element and characteric value (each characteristic represent a GL code / cost element).

  • Placed bitmap eps files into PSD files has no transparency.

    What happened to the transparency in eps bitmap images?  I used to be able to create a duotone with transparency in earlier versions of Photoshop.  I would save a black & white image, as bitmap eps file.  I could import/place it into a psd file to cr

  • 'authentication failed' using Microsoft ADSI version LDAP server

    Hi All, Now days i am facing some problem in authentication (i am using microsoft ADSI version LDAP Server) but am not able to authenticate the LDAP users. I have configured my LDAP server in the same manner as u mentioned in this blog. when I am try

  • Payment Consolidation Feature

    Hello -- We have several accounts where we use the Payment Consolidation feature in the Accounting Tab.  We would like to be able to see the total sales generated by these accounts (i.e., the sum of all the individual accounts that are consolidated w

  • Seteuid() in Solaris 11/11

    Noticed a change in behavior between Solaris 11 Express and Solaris 11/11 When calling seteuid() in 11 Express the Effective UID is correctly set, however, calling seteuid() in 11/11 doesn't set the Effective UID. Sample (not the greatest I know) cod