Category Archives: UnboundID

Posts related to, or about, products from UnboundID Corp.

LDAP: Hardening Server Security (so administrators can sleep at night)

Client Connections Limit the total number of concurrent sessions to the server and limit the number of concurrent sessions per client Set size-limit, lookthrough-limit, and time-limit per client appropriate to client requirements (be aware of the server’s default settings, often … Continue reading

Posted in computing, LDAP, UnboundID | Tagged , | 2 Comments

LDAP: Client Connection Policies

Introduction A Client Connection Policy controls the portions of the DIT a client can access and resource limits on what clients can do with data stored on the server. Clients are subject to one Client Connection Policy at a given … Continue reading

Posted in computing, LDAP, UnboundID | Tagged , , , | Leave a comment

LDAP: Administrative users

Introduction In an UnboundID LDAP directory server, the “Root DN” (root user) accounts have an extensive set of privileges in the default distribution of the server products; therefore the root DN account(s) should not be used in normal operation except … Continue reading

Posted in computing, LDAP, UnboundID | Tagged , , , , | Leave a comment

LDAP: The MultiUpdateExtendedRequest

The UnboundID Directory Server supports an extended request called the MultiUpdateExtendedRequest. This extended request packages multiple updates in a single request and provides control over the behavior of the server when errors arise during the processing of the extended request. … Continue reading

Posted in Java, LDAP, UnboundID, UnboundID LDAP SDK | Tagged , | Leave a comment

LDAP: Pass-Through Authentication Plugin

The UnboundID Directory Server provides a way to capture passwords and store those passwords in a local entry. This is useful when migrating to UnboundID Directory Server from a legacy server that does not allow the extraction of passwords, for … Continue reading

Posted in computing, LDAP, UnboundID | Tagged , , | 2 Comments

LDAP: Using parallel-update for concurrent multiple updates

For applying a small number of changes, ldapmodify is satisfactory. For a large number of changes, parallel-update has the capability of applying multiple changes simultaneously using an operator-provided number of threads. The following example uses 1024 threads to apply 1,000,000 … Continue reading

Posted in LDAP, UnboundID | Tagged , , , | Leave a comment

LDAP: Using authrate to measure authentication performance

Use the authrate command line tool to measure authentication performance of a directory server. The example below illustrates how to execute searches and binds against an LDAP directory server. The example: searches and binds against random entries in the range … Continue reading

Posted in LDAP, UnboundID | Tagged , , , | Leave a comment