Appendix B. DS Verbs

     

Directory services (DS) verbs are commands or requests . They can be issued by the directory services agent (DSA) on a server or by a client requesting that the server perform some action on DS. Many of the verbs can be observed in the DSTrace screen on a NetWare server by using the following server console command:

 SET DSTRACE = +DSA 

This command enables tracing of the DSA on the server and shows all inbound and outbound DSA requests.

NOTE

On Unix/Linux, load ndstrace first and then issue the SET DSTRACE=+DSA command in the ndstrace console.

For Windows servers, go to the Control Panel, select Novell eDirectory Services, highlight dstrace.dlm , and then click the Start button. From the Novell eDirectory Trace screen, select Edit Options, check the DS Agent box, and click OK.


The DSTrace screen shows the information in this format:

 DSA: DSACommonRequest(  r  ) conn:  c  for client <  ObjectName  > 

The request value is shown in decimal format for value r . The connection number making the request is value c , and the object name (if known) is ObjectName .

For example, if Amy.East.XYZCorp on connection 42 on the server attempts to read the Last Name attribute of her user object, the DSTrace screen would show this:

 DSA: DSACommonRequest(3) conn:42 for client <Amy.East.XYZCorp> 

If you turn on the BUFFERS flag as well ( SET DSTRACE=+BUFFER ), you also see the request/reply buffers that go along with this request, and you see the Last Name attribute referenced in the request buffer with the value of the Last Name attribute returned in the reply buffer.

WARNING

DS server-to-server and client-to-server traffic is sent in clear text, so DSTrace may reveal some data that you might deem sensitive. DS passwords, however, are not passed as clear text; as a matter of fact DS passwords are never transmitted on the wire, so there is no danger of them being captured.


Table B.1 lists all the current DSA common request and reply values and their definitions, as used by eDirectory.

Table B.1. DSA Common Request and Reply Values

DEFINE VALUE

DECIMAL

HEXADECIMAL

DESCRIPTION

DSV_UNUSED_0

0x00

Is not used

DSV_RESOLVE_NAME

1

0x01

Performs DS name lookup

DSV_READ_ENTRY_INFO

2

0x02

Reads basic information about an entry

DSV_READ

3

0x03

Reads attribute values in an object

DSV_COMPARE

4

0x04

Performs comparison with an attribute value

DSV_LIST

5

0x05

Lists subordinate objects

DSV_SEARCH

6

0x06

Searches the tree for an object, based on an attribute value

DSV_ADD_ENTRY

7

0x07

Creates an object

DSV_REMOVE_ENTRY

8

0x08

Deletes an object

DSV_MODIFY_ENTRY

9

0x09

Commits changes to an entry's attributes

DSV_MODIFY_RDN

10

0x0A

Moves an object

DSV_DEFINE_ATTR

11

0x0B

Creates a new attribute in the schema

DSV_READ_ATTR_DEF

12

0x0C

Reads the schema definition for an attribute

DSV_REMOVE_ATTR_DEF

13

0x0D

Deletes the attribute definition from the schema

DSV_DEFINE_CLASS

14

0x0E

Creates a new class in the schema

DSV_READ_CLASS_DEF

15

0x0F

Reads the schema definition for a class

DSV_MODIFY_CLASS_DEF

16

0x10

Changes the schema definition for a class (typically used when adding attributes to a class)

DSV_REMOVE_CLASS_DEF

17

0x11

Deletes the class definition from the schema

DSV_LIST_CONTAINABLE_CLASSES

18

0x12

Lists all classes that are flagged as being container classes

DSV_GET_EFFECTIVE_RIGHTS

19

0x13

Determines the currently logged-in object's effective rights to another object

DSV_ADD_PARTITION

20

0x14

Adds a partition to a replica list

DSV_REMOVE_PARTITION

21

0x15

Removes a partition from a replica list

DSV_LIST_PARTITIONS

22

0x16

Lists partitions in a replica list

DSV_SPLIT_PARTITION

23

0x17

Creates a partition operation

DSV_JOIN_PARTITIONS

24

0x18

Merges a partition operation

DSV_ADD_REPLICA

25

0x19

Creates a replica operation

DSV_REMOVE_REPLICA

26

0x1A

Deletes a replica operation

DSV_OPEN_STREAM

27

0x1B

Opens a stream file (for example, a login script)

DSV_SEARCH_FILTER

28

0x1C

Is used for building a DS server-based search

29 through 30

0x1D through 0x1E

Are for DS internal use

DSV_CHANGE_REPLICA_TYPE

31

0x1F

Changes the replica type operation

32 through 36

0x20 through 0x24

Are for DS internal use

DSV_UPDATE_REPLICA

37

0x25

Synchronizes a replica

DSV_SYNC_PARTITION

38

0x26

Partitions synchronization

DSV_SYNC_SCHEMA

39

0x27

Performs schema synchronization

DSV_READ_SYNTAXES

40

0x28

Lists all defined syntaxes

DSV_GET_REPLICA_ROOT_ID

41

0x29

Gets the object ID for the replica root object

DSV_BEGIN_MOVE_ENTRY

42

0x2A

Is issued during an object or partition move

DSV_FINISH_MOVE_ENTRY

43

0x2B

Is issued during an object or partition move

DSV_RELEASE_MOVED_ENTRY

44

0x2C

Is issued during an object or partition move

DSV_BACKUP_ENTRY

45

0x2D

Performs object backup

DSV_RESTORE_ENTRY

46

0x2E

Performs an object restore

47 through 49

0x2F through 0x31

Are for DS internal use

DSV_CLOSE_ITERATION

50

0x32

Ends iteration for large operations

DSV_MUTATE_ENTRY

51

0x33

Changes the object type

52

0x34

Is for DS internal use

DSV_GET_SERVER_ADDRESS

53

0x35

Gets the referenced server's network address

DSV_SET_KEYS

54

0x36

Generates a public key/private key pair (for example, a set password)

DSV_CHANGE_PASSWORD

55

0x37

Changes the object password

DSV_VERIFY_PASSWORD

56

0x38

Verifies the object password

DSV_BEGIN_LOGIN

57

0x39

Starts login

DSV_FINISH_LOGIN

58

0x3A

Ends login

DSV_BEGIN_AUTHENTICATION

59

0x3B

Starts background authentication

DSV_FINISH_AUTHENTICATION

60

0x3C

Ends background authentication

DSV_LOGOUT

61

0x3D

Logs out

DSV_REPAIR_RING

62

0x3E

Repairs the replica ring

DSV_REPAIR_TIMESTAMPS

63

0x3F

Issues a repair timestamps request

64 through 68

0x40 through 0x44

Are for DS internal use

DSV_DESIGNATE_NEW_MASTER

69

0x45

Causes the replica set to become the new master

70 through 71

0x46 through 0x47

Are for DS internal use

DSV_CHECK_LOGIN_RESTRICTIONS

72

0x48

Validates that login can occur

73 through 75

0x49 through 0x4B

Are for DS internal use

DSV_ABORT_PARTITION_OPERATION

76

0x4C

Aborts the partition operation

77 through 78

0x4D through 0x4E

Are for DS internal use

DSV_READ_REFERENCES

79

0x4F

Reads object reference information

DSV_INSPECT_ENTRY

80

0x50

Inspects entry in ENTRY.NDS (or 0.DSD for DS 7 or NDS. xx for DS 8 or eDirectory)

DSV_GET_REMOTE_ENTRY_ID

81

0x51

Requests the entry ID of a remote object

DSV_CHANGE_SECURITY

82

0x52

Modifies a security setting

DSV_CHECK_CONSOLE_OPERATOR

83

0x53

Checks whether the user is a console operator (which is necessary for some API calls)

84

0x54

Is for DS internal use

DSV_MOVE_TREE

85

0x55

Performs a move subtree operation

86 through 87

0x56 through 0x57

Are for DS internal use

DSV_CHECK_SEV

88

0x58

Checks security equivalence vectors (SEVs), which are used to calculate security equivalence

89 through 90

0x59 through 0x5A

Are for DS internal use

DSV_RESEND_ENTRY

91

0x5B

Requests that an object be re-sent

92

0x5C

Is for DS internal use

DSV_STATISTICS

93

0x5D

Returns DS statistics

DSV_PING

94

0x5E

Performs a DS ping , used to check the DS version of a remote server

DSV_GET_BINDERY_CONTEXTS

95

0x5F

Obtains bindery context settings

DSV_MONITOR_CONNECTION

96

0x60

Sets a connection to the " monitored " state (which is authenticated but not licensed); used during the client logon process and by ZENworks

DSV_GET_DS_STATISTICS

97

0x61

Retrieves DS statistics, such as the number of times name resolution resulted in finding the entry local to this server and the number of DS requests received from a remote client

DSV_RESET_DS_COUNTERS

98

0x62

Resets DS statistics counters

DSV_CONSOLE

99

0x63

Indicates that the user is a console operator

DSV_READ_STREAM

100

0x64

Reads from a stream file

DSV_WRITE_STREAM

101

0x65

Writes to a stream file

DSV_CREATE_ORPHAN_PARTITION

102

0x66

Creates an orphan partition ”that is, a partition that does not have a parent; this is to support LDAP extension features

DSV_REMOVE_ORPHAN_PARTITION

103

0x67

Deletes an orphan partition; this is to support LDAP extension features

104 through 105

0x68 through 0X69

Are for DS internal use

DSV_GUID_CREATE

106

0x6A

Creates a global unique ID (GUID)

DSV_GUID_INFO

107

0x6B

Returns GUID info

108 through 109

0x6C through 0x6D

Are for DS internal use

DSV_ITERATOR

110

0x6E

Is an initial iterator search feature

111

0x6F

Is unused

DSV_CLOSE_STREAM

112

0x70

Closes the stream file

113

0x71

Is unused

DSV_READ_STATUS

114

0x72

Returns the status of a replica

DSV_PARTITION_SYNC_STATUS

115

0x73

Returns partition sync status info

DSV_READ_REF_DATA

116

0x74

Retrieves referral information

DSV_WRITE_REF_DATA

117

0x75

Writes referral information

DSV_RESOURCE_EVENT

118

0x76

Reports events associated with defined (cluster) resources

119 through 121

0x77 through 0x79

Are for DS internal use

DSV_CHANGE_ATTR_DEF

122

0x7A

Changes the attribute definition (of an auxiliary class)

DSV_SCHEMA_IN_USE

123

0x7B

Indicates that there exists one or more objects in the tree, using a specific attribute or a class; this may happen when you try to remove an auxiliary class without first removing the objects using the class or if you try to remove a schema extension made to a base class




Novell's Guide to Troubleshooting eDirectory
Novells Guide to Troubleshooting eDirectory
ISBN: 0789731460
EAN: 2147483647
Year: 2003
Pages: 173

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net