1
DIRECTORY-SERVER-MIB DEFINITIONS ::= BEGIN
4
MODULE-IDENTITY, Counter32, Gauge32, OBJECT-TYPE
7
DisplayString, TimeStamp
9
MODULE-COMPLIANCE, OBJECT-GROUP
13
applIndex, DistinguishedName, URLString
15
FROM NETWORK-SERVICES-MIB;
18
LAST-UPDATED "9906070000Z"
19
ORGANIZATION "IETF Mail and Directory Management Working
23
Postal: Cyber Solutions Inc.
24
6-6-3, Minami Yoshinari
25
Aoba-ku, Sendai, Japan 989-3204.
29
E-mail: glenn@cysols.com
30
Working Group E-mail: ietf-madman@innosoft.com
31
To subscribe: ietf-madman-request@innosoft.com"
34
" The MIB module for monitoring Directory Services."
36
-- revision information
38
REVISION "9906070000Z"
40
"This revision of this MIB is published in RFC 2605.
42
This revision obsoletes RFC 1567. It is incompatible with
43
the original MIB and so it has been renamed from dsaMIB
46
REVISION "9311250000Z" -- 25th November 1993
48
"The original version of this MIB was published in RFC 1567."
52
SYNTAX SEQUENCE OF DsTableEntry
53
MAX-ACCESS not-accessible
56
" The table holding information related to the Directory
60
dsTableEntry OBJECT-TYPE
62
MAX-ACCESS not-accessible
65
" Entry containing summary description for a Directory
71
DsTableEntry ::= SEQUENCE {
77
-- Entry statistics/Cache performance
90
dsServerType OBJECT-TYPE
92
frontEndDirectoryServer(0),
93
backEndDirectoryServer(1)
98
"This object indicates whether the server is
99
a frontend or, a backend or, both. If the server
100
is a frontend, then the frontEndDirectoryServer
101
bit will be set. Similarly for the backend."
104
dsServerDescription OBJECT-TYPE
109
"A text description of the application. This information
110
is intended to identify and briefly describe the
111
application in a status display."
116
dsMasterEntries OBJECT-TYPE
121
" Number of entries mastered in the Directory Server."
124
dsCopyEntries OBJECT-TYPE
129
" Number of entries for which systematic (slave)
130
copies are maintained in the Directory Server."
133
dsCacheEntries OBJECT-TYPE
138
" Number of entries cached (non-systematic copies) in
139
the Directory Server. This will include the entries that
140
are cached partially. The negative cache is not counted."
143
dsCacheHits OBJECT-TYPE
148
" Number of operations that were serviced from
149
the locally held cache."
152
dsSlaveHits OBJECT-TYPE
157
" Number of operations that were serviced from
158
the locally held object replications ( copy-
162
dsApplIfOpsTable OBJECT-TYPE
163
SYNTAX SEQUENCE OF DsApplIfOpsEntry
164
MAX-ACCESS not-accessible
167
" The table holding information related to the
168
Directory Server operations."
171
dsApplIfOpsEntry OBJECT-TYPE
172
SYNTAX DsApplIfOpsEntry
173
MAX-ACCESS not-accessible
176
" Entry containing operations related statistics
177
for a Directory Server."
178
INDEX { applIndex, dsApplIfProtocolIndex }
179
::= {dsApplIfOpsTable 1}
180
DsApplIfOpsEntry ::= SEQUENCE {
182
dsApplIfProtocolIndex
191
dsApplIfSimpleAuthBinds
193
dsApplIfStrongAuthBinds
195
dsApplIfBindSecurityErrors
198
-- In-coming operations
208
dsApplIfRemoveEntryOps
210
dsApplIfModifyEntryOps
218
dsApplIfOneLevelSearchOps
220
dsApplIfWholeSubtreeSearchOps
223
-- Out going operations
232
dsApplIfSecurityErrors
238
dsApplIfReplicationUpdatesIn
240
dsApplIfReplicationUpdatesOut
251
-- CLDAP does not use binds; for the CLDAP interface of a Directory
252
-- Server the bind related counters will be inaccessible.
254
-- CLDAP and LDAP implement "Read" and "List" operations
255
-- indirectly via the "search" operation; the following
256
-- counters will be inaccessible for the CLDAP and LDAP interfaces of
257
-- Directory Servers: dsApplIfReadOps, dsApplIfListOps
259
-- CLDAP does not implement "Compare", "Add", "Remove",
260
-- "Modify", "ModifyRDN"; the following counters will be
261
-- inaccessible for the CLDAP interfaces of Directory Servers:
262
-- dsApplIfCompareOps, dsApplIfAddEntryOps, dsApplIfRemoveEntryOps,
263
-- dsApplIfModifyEntryOps, dsApplIfModifyRDNOps.
265
-- CLDAP Directory Servers do not return Referrals
266
-- the following fields will remain inaccessible for
267
-- CLDAP interfaces of Directory Servers: dsApplIfReferrals.
269
dsApplIfProtocolIndex OBJECT-TYPE
270
SYNTAX INTEGER (1..2147483647)
274
"An index to uniquely identify an entry corresponding to a
275
application-layer protocol interface. This index is used
276
for lexicographic ordering of the table."
277
::= {dsApplIfOpsEntry 1}
279
dsApplIfProtocol OBJECT-TYPE
280
SYNTAX OBJECT IDENTIFIER
284
"An identification of the protocol being used by the application
285
on this interface. For an OSI Application, this will be the
286
Application Context. For Internet applications, the IANA
287
maintains a registry[22] of the OIDs which correspond to
288
well-known applications. If the application protocol is
289
not listed in the registry, an OID value of the form
290
{applTCPProtoID port} or {applUDProtoID port} are used for
291
TCP-based and UDP-based protocols, respectively. In either
292
case 'port' corresponds to the primary port number being
293
used by the protocol. The OIDs applTCPProtoID and
294
applUDPProtoID are defined in NETWORK-SERVICES-MIB"
295
::= {dsApplIfOpsEntry 2}
297
dsApplIfUnauthBinds OBJECT-TYPE
302
" Number of unauthenticated/anonymous bind requests
304
::= {dsApplIfOpsEntry 3}
306
dsApplIfSimpleAuthBinds OBJECT-TYPE
311
" Number of bind requests that were authenticated
312
using simple authentication procedures like password
313
checks. This includes the
314
password authentication using SASL mechanisms like
316
::= {dsApplIfOpsEntry 4}
318
dsApplIfStrongAuthBinds OBJECT-TYPE
323
" Number of bind requests that were authenticated
324
using TLS and X.500 strong authentication procedures.
325
This includes the binds that were
326
authenticated using external authentication procedures."
327
::= {dsApplIfOpsEntry 5}
329
dsApplIfBindSecurityErrors OBJECT-TYPE
334
" Number of bind requests that have been rejected
335
due to inappropriate authentication or
336
invalid credentials."
337
::= {dsApplIfOpsEntry 6}
339
dsApplIfInOps OBJECT-TYPE
344
" Number of requests received from DUAs or other
346
::= {dsApplIfOpsEntry 7}
348
dsApplIfReadOps OBJECT-TYPE
353
" Number of read requests received."
354
::= {dsApplIfOpsEntry 8}
357
dsApplIfCompareOps OBJECT-TYPE
362
" Number of compare requests received."
363
::= {dsApplIfOpsEntry 9}
365
dsApplIfAddEntryOps OBJECT-TYPE
370
" Number of addEntry requests received."
371
::= {dsApplIfOpsEntry 10}
374
dsApplIfRemoveEntryOps OBJECT-TYPE
379
" Number of removeEntry requests received."
380
::= {dsApplIfOpsEntry 11}
383
dsApplIfModifyEntryOps OBJECT-TYPE
388
" Number of modifyEntry requests received."
389
::= {dsApplIfOpsEntry 12}
392
dsApplIfModifyRDNOps OBJECT-TYPE
397
" Number of modifyRDN requests received."
398
::= {dsApplIfOpsEntry 13}
400
dsApplIfListOps OBJECT-TYPE
405
" Number of list requests received."
406
::= {dsApplIfOpsEntry 14}
408
dsApplIfSearchOps OBJECT-TYPE
413
" Number of search requests- baseObject searches,
414
oneLevel searches and whole subtree searches,
416
::= {dsApplIfOpsEntry 15}
418
dsApplIfOneLevelSearchOps OBJECT-TYPE
423
" Number of oneLevel search requests received."
424
::= {dsApplIfOpsEntry 16}
427
dsApplIfWholeSubtreeSearchOps OBJECT-TYPE
432
" Number of whole subtree search requests received."
433
::= {dsApplIfOpsEntry 17}
436
dsApplIfReferrals OBJECT-TYPE
441
" Number of referrals returned in response
442
to requests for operations."
443
::= {dsApplIfOpsEntry 18}
445
dsApplIfChainings OBJECT-TYPE
450
" Number of operations forwarded by this Directory Server
451
to other Directory Servers."
452
::= {dsApplIfOpsEntry 19}
454
dsApplIfSecurityErrors OBJECT-TYPE
459
" Number of requests received
460
which did not meet the security requirements. "
461
::= {dsApplIfOpsEntry 20}
463
dsApplIfErrors OBJECT-TYPE
468
" Number of requests that could not be serviced
469
due to errors other than security errors, and
471
A partially serviced operation will not be counted
473
The errors include naming-related, update-related,
474
attribute-related and service-related errors."
475
::= {dsApplIfOpsEntry 21}
478
dsApplIfReplicationUpdatesIn OBJECT-TYPE
483
" Number of replication updates fetched or received from
484
supplier Directory Servers."
485
::= {dsApplIfOpsEntry 22}
487
dsApplIfReplicationUpdatesOut OBJECT-TYPE
492
" Number of replication updates sent to or taken by
493
consumer Directory Servers."
494
::= {dsApplIfOpsEntry 23}
496
dsApplIfInBytes OBJECT-TYPE
501
" Incoming traffic, in bytes, on the interface.
502
This will include requests from DUAs as well
503
as responses from other Directory Servers."
504
::= {dsApplIfOpsEntry 24}
506
dsApplIfOutBytes OBJECT-TYPE
511
" Outgoing traffic in bytes on the interface.
512
This will include responses to DUAs and Directory
513
Servers as well as requests to other Directory Servers."
514
::= {dsApplIfOpsEntry 25}
517
-- The dsIntTable contains statistical data on the peer
518
-- Directory Servers with which the monitored Directory
519
-- Server interacts or, attempts to interact. This table is
520
-- expected to provide a useful insight into the effect of
521
-- neighbours on the Directory Server's performance.
522
-- The table keeps track of the last "N" Directory Servers
523
-- with which the monitored Directory has interacted
524
-- (attempted to interact), where "N" is a locally-defined
526
-- For a multiprotocol server, statistics for each protocol
528
-- are kept separetely.
530
dsIntTable OBJECT-TYPE
531
SYNTAX SEQUENCE OF DsIntEntry
532
MAX-ACCESS not-accessible
535
" Each row of this table contains some details
536
related to the history of the interaction
537
of the monitored Directory Server with its
538
peer Directory Servers."
541
dsIntEntry OBJECT-TYPE
543
MAX-ACCESS not-accessible
546
" Entry containing interaction details of a Directory
547
Server with a peer Directory Server."
548
INDEX { applIndex,dsIntEntIndex, dsApplIfProtocolIndex }
551
DsIntEntry ::= SEQUENCE {
554
dsIntEntDirectoryName
556
dsIntEntTimeOfCreation
558
dsIntEntTimeOfLastAttempt
560
dsIntEntTimeOfLastSuccess
562
dsIntEntFailuresSinceLastSuccess
572
dsIntEntIndex OBJECT-TYPE
573
SYNTAX INTEGER (1..2147483647)
574
MAX-ACCESS not-accessible
577
" Together with applIndex and dsApplIfProtocolIndex, this
578
object forms the unique key to
579
identify the conceptual row which contains useful info
580
on the (attempted) interaction between the Directory
581
Server (referred to by applIndex) and a peer Directory
582
Server using a particular protocol."
585
dsIntEntDirectoryName OBJECT-TYPE
586
SYNTAX DistinguishedName
590
" Distinguished Name of the peer Directory Server to
591
which this entry pertains."
594
dsIntEntTimeOfCreation OBJECT-TYPE
599
" The value of sysUpTime when this row was created.
600
If the entry was created before the network management
601
subsystem was initialized, this object will contain
605
dsIntEntTimeOfLastAttempt OBJECT-TYPE
610
" The value of sysUpTime when the last attempt was made
611
to contact the peer Directory Server. If the last attempt
612
was made before the network management subsystem was
613
initialized, this object will contain a value of zero."
616
dsIntEntTimeOfLastSuccess OBJECT-TYPE
621
" The value of sysUpTime when the last attempt made to
622
contact the peer Directory Server was successful. If there
623
have been no successful attempts this entry will have a value
624
of zero. If the last successful attempt was made before
625
the network management subsystem was initialized, this
626
object will contain a value of zero."
629
dsIntEntFailuresSinceLastSuccess OBJECT-TYPE
634
" The number of failures since the last time an
635
attempt to contact the peer Directory Server was successful.
636
If there have been no successful attempts, this counter
637
will contain the number of failures since this entry
642
dsIntEntFailures OBJECT-TYPE
643
SYNTAX ZeroBasedCounter32
647
" Cumulative failures in contacting the peer Directory Server
648
since the creation of this entry."
651
dsIntEntSuccesses OBJECT-TYPE
652
SYNTAX ZeroBasedCounter32
656
" Cumulative successes in contacting the peer Directory Server
657
since the creation of this entry."
660
dsIntEntURL OBJECT-TYPE
665
" URL of the peer Directory Server."
669
-- Conformance information
670
dsConformance OBJECT IDENTIFIER ::= { dsMIB 4 }
672
dsGroups OBJECT IDENTIFIER ::= { dsConformance 1 }
673
dsCompliances OBJECT IDENTIFIER ::= { dsConformance 2 }
675
-- Compliance statements
677
dsEntryCompliance MODULE-COMPLIANCE
680
"The compliance statement for SNMP entities
681
which implement the DIRECTORY-SERVER-MIB for
682
a summary overview of the Directory Servers ."
684
MODULE -- this module
685
MANDATORY-GROUPS { dsEntryGroup }
687
::= { dsCompliances 1 }
689
dsOpsCompliance MODULE-COMPLIANCE
692
"The compliance statement for SNMP entities
693
which implement the DIRECTORY-SERVER-MIB for monitoring
694
Directory Server operations, entry statistics and cache
697
MODULE -- this module
698
MANDATORY-GROUPS { dsEntryGroup, dsOpsGroup }
700
::= { dsCompliances 2 }
702
dsIntCompliance MODULE-COMPLIANCE
705
" The compliance statement for SNMP entities
706
which implement the DIRECTORY-SERVER-MIB for
707
monitoring Directory Server operations and the
708
interaction of the Directory Server with peer
711
MODULE -- this module
712
MANDATORY-GROUPS { dsEntryGroup, dsIntGroup }
714
::= { dsCompliances 3 }
716
dsOpsIntCompliance MODULE-COMPLIANCE
719
" The compliance statement for SNMP entities
720
which implement the DIRECTORY-SERVER-MIB for monitoring
721
Directory Server operations and the interaction of the
722
Directory Server with peer Directory Servers."
724
MODULE -- this module
725
MANDATORY-GROUPS { dsEntryGroup, dsOpsGroup, dsIntGroup }
727
::= { dsCompliances 4 }
730
-- Units of conformance
732
dsEntryGroup OBJECT-GROUP
733
OBJECTS {dsServerType, dsServerDescription,
734
dsMasterEntries, dsCopyEntries,
735
dsCacheEntries, dsCacheHits,
739
" A collection of objects for a summary overview of the
743
dsOpsGroup OBJECT-GROUP
745
dsApplIfProtocolIndex, dsApplIfProtocol,
746
dsApplIfUnauthBinds, dsApplIfSimpleAuthBinds,
747
dsApplIfStrongAuthBinds, dsApplIfBindSecurityErrors,
748
dsApplIfInOps, dsApplIfReadOps,
749
dsApplIfCompareOps, dsApplIfAddEntryOps,
750
dsApplIfRemoveEntryOps, dsApplIfModifyEntryOps,
751
dsApplIfModifyRDNOps, dsApplIfListOps,
752
dsApplIfSearchOps, dsApplIfOneLevelSearchOps,
753
dsApplIfWholeSubtreeSearchOps, dsApplIfReferrals,
754
dsApplIfChainings, dsApplIfSecurityErrors,
755
dsApplIfErrors, dsApplIfReplicationUpdatesIn,
756
dsApplIfReplicationUpdatesOut, dsApplIfInBytes,
760
" A collection of objects for monitoring the Directory
764
dsIntGroup OBJECT-GROUP
766
dsIntEntDirectoryName, dsIntEntTimeOfCreation,
767
dsIntEntTimeOfLastAttempt, dsIntEntTimeOfLastSuccess,
768
dsIntEntFailuresSinceLastSuccess, dsIntEntFailures,
769
dsIntEntSuccesses, dsIntEntURL}
772
" A collection of objects for monitoring the Directory
773
Server's interaction with peer Directory Servers."