Route500 Directory Server
- 1993 Standard X.500 Directory featuring
Replication, Access Control, and Authentication
- High performance disk based database
- Full DSP, DISP, DOP and DAP support
- "Approximate Match" searching
based on the Soundex algorithm
- Flexible Schema support
- Attribute Inheritance
- Caching
- Logging/Statistical information
gathering
- Full range of communications options
- Can be supplied stand-alone
or integrated with a Route400 Message Server
The Route500 Directory Server (Directory
System Agent/DSA), manages data held in an X.500 Directory, which
may itself be connected to the wider global directory community.
The data stored in the directory can be completely general, but
will usually include information about an organisation's members
such as postal and electronic mail addresses, telephone numbers
etc. It can also include graphical, sound and multimedia information.
The X.500 directory supports general
purpose querying of information by users. It is also intended
for use within the messaging infrastructure to provide mail addresses,
support for messaging security and configuration information.
In essence the directory is a database that can be large and highly
distributed. It is hierarchically structured with its entries
held in a Directory Information Tree.
The Route500 Directory Server conforms
to the international X.500 1993 standards. It can be supplied
stand-alone or integrated with a Route400 Message Server.
Route500 DSAs can be accessed by Route500
(Windows,
Macintosh)
or other vendor's DUAs using the Directory Access Protocol (DAP),
and by Route500 or other vendor DSAs using the Directory System
Protocol (DSP).
Overview
The Directory Server stores, retrieves,
and queries information from an integrated directory database.
This hierarchic structure is known as the Directory Information
Tree (DIT).
Each Directory Server controls its own
directory database which is locally administered.
Route500 implements the storage of the
DIT using an efficient disk based database:
- Designed for large numbers of entries,
of the order of several million
- Hash indexed disk database to locate
all stored objects
- Fast start up which does not degrade
when more entries added
- Reduced memory requirements (compared
with DSAs which use a purely memory based model)
Security Management
- The X.500 security model provides
for Authentication (the determination of the identity of a communications
partner) and Authorisation/Access Control (the determination of
what data and operations are permitted to an authenticated user)
- For DAP, the Directory supports
no authentication, simple unprotected and strong authentication.
- For DSP the Directory supports no
authentication and simple unprotected authentication
- For DISP the Directory supports
simple unprotected authentication.
- The object class selected for an
entry defines the attributes that an entry both must and may contain
- Operation specific access control
(e.g. searching and listing)
- Flexible access to the directory
using object inheritance
Replication
- Ability to store copies of the same
directory information in more than one DSA, together with protocols
to keep the copies up to date.
- The DSA implements both the supplier
and consumer sides of the Directory Information Shadowing Protocol
(DISP)
- Support for Primary and Secondary
shadowing, incremental and full updates, supplier initiated updates
and on-change updates
Administrative Facilities
- Configuration of the DSA is handled
almost entirely by information stored within the Directory
- An Administrative Directory User
Agent is used to manipulate this data
- Remote Management is available using
the Administrative User Agent.
- Knowledge Management (enabling a
DSA to locate information held outside its naming context) is
mapped onto the DIT
- Import/export utility for importing
information to and exporting from any X.500 directory using simple
delimited text. Used for information loading and major restructuring
of the DIT
- For monitoring purposes the Directory
Server maintains a list of active associations and other statistics
that can be accessed via DAP using special commands built into
the Administrative DUA
Standards, Profiles and Conformance
- Inter DSA communication uses the
X.500 Directory System Protocol (DSP), Directory Information Shadowing
Protocol (DISP) and Directory Operational Bindings Management
Protocol (DOP)
- DUA to DSA communication uses the
X.500 Directory Access Protocol (DAP)
- Route500 products successfully completed
interoperability trials with other leading implementations at
EuroSInet Interoperability workshops
- Conforms to Directory Schema standards:
ISO/IEC 9594-6 (X.520, 1993) and ISO/IEC 9594-7 (X.521, 1993)
as well as those defined in ISO/IEC 10021-2 (1992 & 1988)/X.402/RFC
1274 (The COSINE & Internet X.500 Schema)
- Compliant with ITU X.500/ISO/IEC
9594 1993 standards
- Compliant with NIST, EWOS, and UK
GOSIP
Connectivity Options
- DSP, DISP, DOP and DAP access are
supported over X.25, TCP/IP and dial-up (X.445/APS) connections
- Where applicable, standard UNIX
transport interfaces i.e. UNIX SVR4 Transport Layer Interface
(TLI) and the X/Open Transport Interface (XTI) are supported
System Requirements
- Route500 Directory Server Software
(supplied stand-alone or integrated with a Route400 Message Server)
- SCO UNIX System 3.2 (version 3.2.1
or higher) and TCP/IP runtime v1.1.3f
- SPARC Solaris (version 2.3 or higher)
- DEC OSF/1 v2.0
- Suggested memory requirement of
the order of 32Mb
- Other platforms will become available,
please enquire for current status
|