Tài liệu Module 2: Installing and Exploring MMS docx

# Introduction to MMS Server and Clients MMS Server LDAP Client Web Browser MMS Compass Active Compass MMS is comprised of both a server and client component!. You can also connect to M

Contents

Overview 1

Introduction to MMS Server and Clients 2

Lab A: Installing MMS Server 12

Installing and Configuring MMS Compass 13

Examining the Results of an MMS Installation21

Lab B: Installing and Using Compass 25

with all applicable copyright laws is the responsibility of the user No part of this document may

be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property

 2000 Microsoft Corporation All rights reserved

Microsoft, BackOffice, MS-DOS, Windows, Windows NT, <plus other appropriate product

names or titles Replace this example list with list of trademarks provided by copy editor Microsoft is listed first, followed by all other Microsoft trademarks in alphabetical order > are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries

<This is where mention of specific, contractually obligated to, third party trademarks, which are added by the Copy Editor>

The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted

Other product and company names mentioned herein may be the trademarks of their respective owners

Overview

! Introduction to MMS Server and Clients

! Installing MMS Server

! Installing and Configuring MMS Compass

! Examining the Results of an MMS Installation

At the end of this module, you will be able to:

! Identify the MMS Server and client components

! Install MMS Server

! Install and configure MMS Compass

! Examine the results of an MMS installation

! Configure MMS Server by using the server and client interfaces

! Uninstall MMS from the computer

! Apply best practices for installing and configuring MMS

In this module, you will learn

about installing MMS Server

and MMS Compass

# Introduction to MMS Server and Clients

MMS Server LDAP

Client

Web Browser

MMS Compass

Active Compass

MMS is comprised of both a server and client component The server component manages the storage of the metadirectory data, while the client is used to manipulate and administer that data To implement MMS, you will install the following two components:

the metadirectory data MMS Server ensures that network identity data is synchronized between the connected directories and the metaverse

the metadirectory data stored on the MMS Server MMS Compass is a general-purpose Lightweight Directory Access Protocol (LDAP) client, which can be used to display and modify MMS data

MMS Compass is the client program that is included on the installation compact disc You can also connect to MMS Server using a generic LDAP client, a standard Web browser, or the Active Compass client

Transaction DB Hash DB

DSA PAL

MMS consists of one or more metadirectory servers that manage the metadirectory information base and satisfy requests from various clients to display or modify information in that information base Once the MMS Server

is started, it monitors a defined LDAP and HTTP port, and responds to queries

to display and modify objects stored in the metadirectory Through the use of management agents, MMS Server synchronizes changes to directory objects between the metaverse namespace and the connected directories

The MMS Server architecture includes the following components:

! The data store The x500.db is a proprietary Abstract Syntax Notation (ASN.1) encoded database The data store includes several additional components

! Management Agents (MAs) MAs are the key to the metadirectory They integrate each connected directory through the synchronization engine MAs perform all directory synchronization and attribute flow The management agent control script controls the overall process flow of a MA MAs use templates during the synchronization phase to manipulate metadirectory object entries

! Transaction stack database

By default, all additions, modifications, and deletions to the directory are written to a separate transaction database This database represents physical files from viatran.000 up to viatran.255

more metadirectory servers

that manage the

metadirectory information

base and satisfy requests

from various clients to

display or modify

information in that

information base

Introducing the MMS Clients

! MMS Compass

$ General purpose LDAP client included with MMS

$ Installed from the MMS compact disc or from MMS homepage

! MMS Active Compass

$ ActiveX implementation of MMS Compass

$ Runs from MMS server on client computer with network connectivity to the MMS server

! MMS HTTP Client

$ Web-based client offers basic search and browse functionality

$ Available to any form-enabled Web browser

MMS Server supports both LDAP and HTTP client access A standard Web browser provides basic metadirectory access capabilities It enables you to start MMS Active Compass within your browser or install the stand-alone MMS Compass on your local computer MMS Compass is the most powerful interface for managing the directory, and it is the one normally used by directory administrators

MMS Compass

MMS Compass can either be installed from the initial Web browser connection

to the MMS Server or from the MMS compact disc Once installed to the local computer, MMS Compass is used to connect to the MMS Server and administer the metadirectory MMS can be configured to allow anonymous access to the metadirectory, and allow non-administrative access to the data Anonymous logon might be permitted to allow users the ability to manage some portion of their personal data, such as home address or telephone number

MMS Active Compass

MMS Active Compass is an ActiveX® implementation of the MMS Compass client that runs within any browser that supports ActiveX technology Active Compass is essentially the same application as the stand-alone MMS Compass client, but it is run from a Web browser, rather than as a locally installed application Active Compass allows metadirectory access from any computer with a compatible Web browser and network access to MMS Server

MMS Server supports both

LDAP and HTTP client

access

MMS HTTP Client

The MMS HTTP client is a Hypertext Markup Language (HTML) interface accessed from the MMS Server computer by using a standard Web browser The default homepage for the MMS is titled Your Metadirectory, and it supports basic browse, search, and modify capabilities You can customize this default page to meet the specific needs of your organization You access the MMS HTTP client by entering the address of the MMS server in the Web browser address bar

If you are using an HTTP port number other than the default port number

80, you will have to type the port number as part of the URL for the MMS server For example, to access the MMS HTTP client for a server named METAHOST that is configured to use HTTP port 81, you must type

http://metahost:81

In addition to the above-described clients, you can also access the metadirectory

using any generic LDAP client, such LDP.exe from the Windows 2000 Server

Resource Kit

Note

During MMS Server installation, you will supply information that determines how MMS is configured in your network By carefully considering these preinstallation tasks, prior to starting the installation process, you ensure a successful install of the server

The installation process itself is accomplished by running the MMS Server 2.2 Installation wizard This wizard prompts you for the necessary information to successfully install MMS Server There are several dialog boxes in the Installation wizard in which you will supply the information determined through accomplishing the preinstallation tasks

MMS Server Installation Requirements

Verify Hardware

on Windows 2000 HCL

Memory

128 MB beyond that required by the operating system

512 MB or more recommended

128 MB beyond that required by the operating system

512 MB or more recommended

CPU

P300 MHz or higher Hard Disk Space

1.0 GB required, 2.0 GB recommended

1.0 GB required, 2.0 GB recommended

Operating System

Windows 2000 Advanced Server

or Datacenter Server

Windows 2000 Advanced Server

or Datacenter Server

Networking

Before starting the MMS Server installation process, verify that the computer

on which the server is to be installed meets or exceeds the minimum system requirements The following table defines the minimum and recommended system requirements for installing MMS Server

requirement

Operating system Windows 2000 Advanced

Server or Datacenter Server

Hard disk space Two gigabyte (GB) hard

disk with a minimum of one GB of free space

Two GB additional free space

Disk space requirements vary by the number of object entries and the number and size of each objects’ attributes imported into the metadirectory

Before starting the MMS

Server installation process,

verify that the computer on

which the server is to be

installed meets or exceeds

the minimum system

requirements

Note

Preinstallation Tasks

! Determine a Context Prefix

$ Defines the starting point of the metaverse namespace

$ Cannot be changed after installation, must reinstall

! Determine the Application Name

$ This is the name of the MMS server in the metaverse namespace

$ Defaults to the computer name, but can be changed to reflect role of the server in the organization

! Determine an Organizational Unit Name

$ This is the organizational unit that will contain the MMS server

$ Defaults to Application, but can be changed to reflect your metadirectory structure

! Determine the HTTP and LDAP Port Numbers

$ Defaults to 80 for HTTP, 389 for LDAP

$ Can change to 81 and 390 during installation if conflict discovered

The MMS Server Version 2.2 Installation wizard guides you through the MMS Server installation process There are, however, a few issues you will want to consider before starting the installation process, including determining the MMS context prefix, the application name, the organizational unit name, and the Transmission Control Protocol/Internet Protocol (TCP/IP) ports used by MMS Server

Determining a Context Prefix

The MMS context prefix determines where your MMS directory information is located within a global namespace This global namespace can either be based

on the Internet Domain Name System (DNS)scheme or the X.500 standard It is recommend that you use DNS because it is the simplest and most widely used domain name system DNS is also the namespace used by the Active Directory`

directory service, and therefore, will best support future integration of MMS and Active Directory

It is important to select the correct naming context for your top-level MMS Server and all subordinate MMS Servers during the installation If you need to change a server’s root naming context, you must reinstall MMS

Determining an Application Name

The application name for your MMS server is the name by which the server will be known in the metadirectory During the installation process, an entry will be created in the metadirectory that corresponds to the application name you provide You should choose a name that fits with any server naming standards enforced by your organization

Topic Objective

To describe the tasks to be

completed prior to installing

Determining an Organizational Unit Name

The organizational unit name determines where in the metadirectory hierarchy your server appears An entry will be created in the metadirectory that

corresponds to the organizational unit name you choose and the entry for your server will be placed directly below the organizational unit entry The default organizational unit name is Applications You may choose any name you wish, though you need to be aware of possible conflicts with organizational unit names that exists in external directories and that you plan on bringing into the metaverse namespace

Determining the MMS Server Ports

The MMS Server port numbers determine what TCP/IP ports are used by the MMS service By default, the MMS server provides LDAP services over TCP port 389 and HTTP services over TCP port 80 If these two ports are reserved

by other services running on the MMS server, the installation program prompts you to choose an alternate port number During the installation process, you can choose port 390 for LDAP and port 81 for HTTP If you want to use any other port, you can do so after the installation is complete

For more information on changing the TCP ports that the MMS server uses, see “Configuring the MMS Server” in this module

Note

Installing MMS Server

To Install MMS Server

Select Installation

Specify an Application Name

As the MMS Server Release 2.2 Installation wizard guides you through the MMS Server installation process, there are several decision points you must consider Perform the following steps to install MMS Server:

1 Log on the computer as an Administrator and start the MMS Server installation

When you insert the MMS compact disc, the installation menu should

automatically appear If this menu does not appear, double-click Setup.exe

from the root directory This program will start the MMS Installation wizard, which will guide you through the installation process

2 Select to install MMS Server either as a new installation or as an upgrade:

is whether this is a new installation or an upgrade If you are installing MMS for the first time, or if you want to overwrite a previous version,

click A new installation

to update executables, configuration files, client software, the metadirectory store, and your server’s schema without altering the directory contents An upgrade does not alter existing management agents, the BASIC formset, or your HTML definitions This ensures that any customizations you might have made are protected You must upgrade these components individually

3 Specify the context prefix for your metadirectory

During the pre-installation planning phase, you designed the context prefix

to be used for your metadirectory You must type the Internet domain name and organizational unit information in the appropriate fields at this time Be sure to include the complete domain component syntax, such as

DC=Contoso

4 Specify an application name

Topic Objective

To introduce the decision

points as you install MMS

process, there are several

decision points you must

consider

Leave the application name at the default value of the server name You can change this value if you want the MMS server to be known by a different name in the metadirectory

5 Specify the organizational unit name

Type the name of the organizational unit that will contain the MMS server,

as defined by the application name assigned in the previous step

6 Verify the metadirectory namespace

Before installing MMS Server files to your computer, verify the metadirectory namespace information is correct It is important that the metadirectory namespace information is correct, because to change a server’s root naming context, you must reinstall MMS

Following this step, installation of MMS Server files will begin Setup will install MMS Server 2.2 in the \Zoomserv folder of the local hard disk that you selected at the beginning of the installation process

7 Start the MMS service

If you choose to start the MMS service during the installation, it will configure MMS Server to automatically start when you start your computer

If you choose to not start the service, MMS Server will be configured to run

as a task, in which case MMS must be started from the Start menu or from

the command line

Lab A: Installing MMS Server

In this lab, you will

Explain the lab objectives

# Installing and Configuring MMS Compass

! Installing MMS Compass

! Exploring the MMS Compass Interface

After MMS Server is installed and started, you will install MMS Compass MMS Compass is usually installed as an application on the MMS

administrator’s computer, but you may want to install MMS Compass on the MMS server itself to perform the initial server configuration

Before starting the installation, verify that the computer meets the minimum system requirements to install MMS Compass After the minimum system requirements are verified, you can install MMS Compass, either from the compact disk or from a link on the Your Metadirectory Web page

After you have installed MMS Compass, you must configure the client to connect to MMS Server After you connect to the MMS Server, you can explore the metadirectory data and the MMS Compass user interface

Topic Objective

To introduce the concepts of

installing and configuring

MMS Compass

Lead-in

After MMS Server is

installed and started, you

will install MMS Compass

MMS Compass System Requirements

Verify That Your Computer Meets the Following

8 MB in addition

to that required

by the operating system (16 recommended)

Hard Disk Space

4 MB

Operating System

Any version of Microsoft Windows 2000

Any version of Microsoft Windows 2000

The following minimum system requirements are necessary to install MMS Compass:

Component Requirement

Operating System Any version of Windows 2000 Processor Pentium-compatible 166 MHz or faster

requirements of the operating system For optimal performance it is recommended to have 16 MBs available

The following minimum

system requirements are

necessary to install MMS

Compass

Installing MMS Compass

Your Metadirectory

Microsoft Metadirectory Services – Microsoft Internet Explorer

File Edit View Favorites Tools Help Back Search Favorites History Address http://vancouver2:80

LOG ON SEARCH BROWSE

Start MMS Active Compass Install MMS Active Compass Install MMS Forms Designer View MMS Documentation

Install MMS Compass from Web Page

Install MMS Compass from Web Page

Install\Compv2.exe Install\Compv2.exe

To install MMS Compass on your local computer, you can either connect to the MMS Server by using a Web browser to access the installation files, or you can install the client from the MMS compact disc The installation process, using either access method, is the same

To install MMS Compass from the Web browser, type the name of the MMS Server computer in the browser’s address bar The default Your Metadirectory

home page appears Click the Install Compass link to install MMS Compass

on the local computer Alternatively, MMS Compass can be installed from the

MMS compact disc, by double-clicking COMPV2.EXE in the \Install folder

By default, MMS Compass will be installed in the Program Files\Microsoft Metadirectory Services\Compass folder This default installation location can

be changed during the installation process During the install, the Microsoft Account Joiner application is also installed in the MMS Compass installation folder Account Joiner is used to match nonjoined connectors with metaverse entries and join them

Topic Objective

To install MMS Compass

Lead-in

To install MMS Compass on

your local computer, you

can either connect to the

MMS Server by using a

Web browser to access the

installation files, or you can

install the client from the

MMS compact disc

Configuring MMS Compass

Configure Servers

Server Configuration Servers:

Delete

Apply Cancel

Server Parameters Name

MyServer Host Name or Address vancouver2.vancouverd Port 389

LDAP Port Number

Enter Server Data

The first time you attempt to log on to MMS, you must configure MMS

Compass to connect to the server The Configure Servers dialog box

determines to which MMS Server computer in the organization you will connect To connect to multiple MMS servers, you can create multiple entries

in this dialog box To configure this dialog box, click New and enter the MMS

server data in the appropriate fields

Server Name

Type the name of the MMS Server computer you defined during the installation process

Host Name or IP Address

Type the fully qualified domain name (FQDN) of the MMS Server computer (for example metaserver.domainname.contoso.com), or the IP address of that computer

LDAP Port Number

Type the LDAP port number that the MMS Server is configured to use By default, the LDAP port number is 389 The default port number may be changed during the installation process to avoid a port number conflict with another service running on the server

After the configuration information has been entered, click Apply to store this

data in the server list You can now repeat this process to configure MMS Compass to connect to other MMS Server computers Click OK to connect to the server selected in the list This dialog box is also accessible by running Zoomcfg.exe that is installed with MMS Compass

Topic Objective

To configure MMC

Compass

Lead-in

The first time you attempt to

log on to MMS, you must

configure MMS Compass to

connect to the server

Using Compass to Connect to MMS

Anonymous Logon

Identity Based Logon

MMS Server

Connect Using A Web Browser

Connect Using A Web Browser

Authenticated User

After you have connected to the server, you must log on to MMS You can log

on to MMS as either an anonymous user, or an authenticated user (based on identity) The default logon mode is identity-based What logon mode you select determines what rights you have to the metadirectory once connected to MMS

Identity-Based Logon

An identity-based logon can either be expressed as a distinguished name or as a Simple Mail Transfer Protocol (SMTP) e-mail address Since SMTP names are easier to type, they are more likely to be used The following are examples of valid logon names:

cn=James Smith, ou=Actuarial, dc=Humongous, dc=Contoso, dc=Com

or jsmith@contoso.com

Anonymous Logon

When logging on to MMS by using MMS Compass, you can specifically select anonymous logon MMS Server extends to the anonymous user only the most basic access rights to metadirectory information An anonymous user is granted only those access permissions that the security policy accords to the anyone role-related entry To have anything more than these basic rights, you must log

Topic Objective

To describe the process of

using Compass to connect

to MMS Server

Lead-in

After you have connected to

the server, you must log on

to MMS