1.3 Novell LDAP Servers

Novell has provided an LDAP server for accessing the eDirectory directory since the release of NetWare 4.1. The LDAP server in NetWare 5 added support for LDAP v3. The following table compares the features of the newest release of the LDAP server with previous releases of the LDAP server.

Table 1-2 Comparison Between Different eDirectory Releases

LDAP Feature

Novell eDirectory

Novell eDirectory

NDS eDirectory

NDS eDirectory

NDS 8

NDS

Version 8.7

Version 8.6

Version 8.5

Version 8.3x

Version 8.1x

Version 7.xx

Authentication (anonymous, clear text, and SSL)

Yes

Yes

Yes

Yes

Yes

Yes

Mutual authentication

Yes

Yes

Yes

No

No

No

SASL Authentication

Yes

Yes, simple

No

No

No

No

MD5 Bind

Yes

No

No

No

No

No

NMAS Bind

Yes

No

No

No

No

No

Configure port for clear text and SSL binds

Yes

Yes

Yes

No

No

No

Enforcement of connection management policies (concurrent connections and time restrictions)

Yes

Yes

Yes

No

No

No

Enforcement of password restrictions (length, grace logins, expiration, and uniqueness)

Yes

Yes

Yes

No

No

No

Entry management (search, modify, compare, rename, adding, deleting)

Yes

Yes

Yes

Yes

Yes

Yes

Partition and replica management

Yes

Yes

Yes

No

No

No

Thread support

Yes

Yes

Yes

Yes

Yes

Yes

Set indexes for faster searching

Yes

Yes

Yes

No

No

No

LDAP controls (query root DSE for supported controls)

Yes

Yes

Yes

Yes

Yes

No

LDAP extensions (query root DSE for supported extensions)

Yes

Yes

Yes

Yes

No

No

Readable root DSE

Yes

Yes

Yes

Yes

Yes

Yes

Referrals and traversals

Yes

Yes

Yes

Yes

Yes

Restrictions

Read and write schema

Yes

Yes

Yes

Yes

Read—Yes

No

Modify existing schema definitions

Yes

Yes

Yes

No

No

No

Auxiliary classes

Yes

Yes

Yes

Yes

Yes

No

Valid LDAP names require no mapping

Yes

Yes

Yes

Yes

No

No

Generated LDAP name for all NDS names which are not mapped or which are not valid

Yes

Yes

Yes

No

No

No

Access to eDirectory compound syntaxes

Yes

Yes

Yes

Selected

No

No

Operational attributes

Yes

Yes

Yes

No

No

No

Dynamic Groups

Yes

Yes

No

No

No

No

Persistent Search

Yes

Yes

No

No

No

No

Refresh LDAP server from LDAP

Yes

Yes

Yes

No (only from NDAP))

No (only from NDAP)

No (only from NDAP)

Superior Referrals

Yes

No

No

No

No

No

Referrals for non-search operations

Yes

No

No

No

No

No

TLS (SSL) encryption

Yes

Yes

Yes

Yes

Yes

No

Start/Stop TLS

Yes

No

No

No

No

No

Extensible Match

Yes

No

No

No

No

No

Events

Yes

No

No

No

No

No

For an application to use the LDAP features in NDS 8 or eDirectory, the application must attach to an LDAP server running that version of NDS/eDirectory.

1.3.1 Deployed Versions of NDS and eDirectory

Table 1-3 Deployed Versions of NDS and eDirectory

Product Version

Build Version

Platforms

NetWare 5.1 SP4 (NDS 7)

DS.nlm v7.57

NetWare 5.1

NetWare 5.1 SP 4 (NDS 8)

DS.nlm v8.79

NetWare 5.1

eDirectory 8

DS.nlm & DS.dlm v8.79

NetWare 5.0, Win NT/2K

eDirectory 8.5.x

DS v85.23

NetWare 5.x, Win, Solaris

NetWare 6 (eDirectory 8.6)

DS.nlm v10110.20

NetWare 6

eDirectory 8.6.1

DS v10210.43

NW 5.1, NW 6, Win, Solaris, Linux

NetWare 6 SP1 (eDirectory 8.6.2)

DS.nlm v10310.17

NetWare 6

eDirectory 8.6.2

DS v103xx.xx

NW 5.1, NW 6, Win, Solaris, Linux

eDirectory 8.7

DS v10410.xx

NW 5.1, NW6, Win, Solaris, Linux, AIX