DSA-MIB

All MIBs › DSA-MIB

Organization: IETF Mail and Directory Management Working Group

Last Updated: 1993-11-25

Category: Web and Application Servers

Description: Provides managed objects for monitoring directory servers, covering X.500 DSAs and LDAP servers, along with their access statistics, operation counts, and peer interactions.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring DSA-MIB with a free 30-day trial of IPNetwork Monitor.

What Is DSA-MIB?

DSA-MIB is a standards-oriented MIB for monitoring Directory System Agents, covering both X.500 DSAs and LDAP directory servers. It exposes access statistics, operation counts (such as binds and searches), and information about peer DSA associations used for directory chaining or replication. Its monitoring value is centered on software/service health rather than hardware: operation counts reveal server load, and peer association status shows whether directory replication or referral relationships are functioning, both of which are key to diagnosing a slow or unresponsive directory service. It aligns conceptually with X.500 and LDAP directory standards rather than any particular vendor implementation. It is typically deployed on enterprise or carrier directory infrastructure (X.500 DSAs or LDAP servers) where administrators need visibility into directory service load and peer health. Engineers can download the DSA-MIB file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in DSA-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

X.500 Directory System Agent (DSA) server
LDAP directory server

Monitoring Examples

No sample objects were supplied for this module, so specific table names cannot be cited with confidence. Conceptually, an administrator would poll operation counters (binds, searches, errors) to detect an overloaded directory server, and peer/association status objects to confirm that chaining or replication links to other DSAs remain established. A sudden rise in error counts or a peer association going down would signal a directory service problem needing attention.

What Can Be Monitored

directory server operation/access counts
DSA/LDAP error rates
peer DSA association status
bind and search request statistics

Imported Objects

From NETWORK-SERVICES-MIB

DistinguishedName
applIndex	OBJECT-TYPE

From RFC1213-MIB

mib-2

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION
TimeStamp

How to Use in IPNetwork Monitor

Example using dsaAnonymousBinds OID:

Select an X.500 Directory System Agent / LDAP directory server (vendor-neutral) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dsaAnonymousBinds into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of anonymous binds to this DSA from DUAs since application start. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
dsaMIB	1.3.6.1.2.1.29			The MIB module for monitoring Directory System Agents.
dsaOpsTable	1.3.6.1.2.1.29.1		not-accessible	The table holding information related to the DSA operations.
dsaOpsEntry	1.3.6.1.2.1.29.1.1		not-accessible	Entry containing operations related statistics for a DSA.
C32 dsaAnonymousBindsEx	1.3.6.1.2.1.29.1.1.1	Counter32	read-only	Number of anonymous binds to this DSA from DUAs since application start.
C32 dsaUnauthBinds	1.3.6.1.2.1.29.1.1.2	Counter32	read-only	Number of un-authenticated binds to this DSA since application start.
C32 dsaSimpleAuthBinds	1.3.6.1.2.1.29.1.1.3	Counter32	read-only	Number of binds to this DSA that were authenticated using simple authentication procedures since application start.
C32 dsaStrongAuthBinds	1.3.6.1.2.1.29.1.1.4	Counter32	read-only	Number of binds to this DSA that were authenticated using the strong authentication procedures since application start. This includes the binds that were authenticated using external authentication procedures.
C32 dsaBindSecurityErrors	1.3.6.1.2.1.29.1.1.5	Counter32	read-only	Number of bind operations that have been rejected by this DSA due to inappropriateAuthentication or invalidCredentials.
C32 dsaInOps	1.3.6.1.2.1.29.1.1.6	Counter32	read-only	Number of operations forwarded to this DSA from DUAs or other DSAs since application start up.
C32 dsaReadOps	1.3.6.1.2.1.29.1.1.7	Counter32	read-only	Number of read operations serviced by this DSA since application startup.
C32 dsaCompareOps	1.3.6.1.2.1.29.1.1.8	Counter32	read-only	Number of compare operations serviced by this DSA since application startup.
C32 dsaAddEntryOps	1.3.6.1.2.1.29.1.1.9	Counter32	read-only	Number of addEntry operations serviced by this DSA since application startup.
C32 dsaRemoveEntryOps	1.3.6.1.2.1.29.1.1.10	Counter32	read-only	Number of removeEntry operations serviced by this DSA since application startup.
C32 dsaModifyEntryOps	1.3.6.1.2.1.29.1.1.11	Counter32	read-only	Number of modifyEntry operations serviced by this DSA since application startup.
C32 dsaModifyRDNOps	1.3.6.1.2.1.29.1.1.12	Counter32	read-only	Number of modifyRDN operations serviced by this DSA since application startup.
C32 dsaListOps	1.3.6.1.2.1.29.1.1.13	Counter32	read-only	Number of list operations serviced by this DSA since application startup.
C32 dsaSearchOps	1.3.6.1.2.1.29.1.1.14	Counter32	read-only	Number of search operations- baseObjectSearches, oneLevelSearches and subTreeSearches, serviced by this DSA since application startup.
C32 dsaOneLevelSearchOps	1.3.6.1.2.1.29.1.1.15	Counter32	read-only	Number of oneLevelSearch operations serviced by this DSA since application startup.
C32 dsaWholeTreeSearchOps	1.3.6.1.2.1.29.1.1.16	Counter32	read-only	Number of wholeTreeSearch operations serviced by this DSA since application startup.
C32 dsaReferrals	1.3.6.1.2.1.29.1.1.17	Counter32	read-only	Number of referrals returned by this DSA in response to requests for operations since application startup.
C32 dsaChainings	1.3.6.1.2.1.29.1.1.18	Counter32	read-only	Number of operations forwarded by this DSA to other DSAs since application startup.
C32 dsaSecurityErrors	1.3.6.1.2.1.29.1.1.19	Counter32	read-only	Number of operations forwarded to this DSA which did not meet the security requirements.
C32 dsaErrors	1.3.6.1.2.1.29.1.1.20	Counter32	read-only	Number of operations that could not be serviced due to errors other than security errors, and referrals. A partially serviced operation will not be counted as an error. The errors include NameErrors, UpdateErrors, Attribute errors and ServiceErrors.
dsaEntriesTable	1.3.6.1.2.1.29.2		not-accessible	The table holding information related to the entry statistics and cache performance of the DSAs.
dsaEntriesEntry	1.3.6.1.2.1.29.2.1		not-accessible	Entry containing statistics pertaining to entries held by a DSA.
G32 dsaMasterEntries	1.3.6.1.2.1.29.2.1.1	Gauge32	read-only	Number of entries mastered in the DSA.
G32 dsaCopyEntries	1.3.6.1.2.1.29.2.1.2	Gauge32	read-only	Number of entries for which systematic (slave) copies are maintained in the DSA.
G32 dsaCacheEntries	1.3.6.1.2.1.29.2.1.3	Gauge32	read-only	Number of entries cached (non-systematic copies) in the DSA. This will include the entries that are cached partially. The negative cache is not counted.
C32 dsaCacheHits	1.3.6.1.2.1.29.2.1.4	Counter32	read-only	Number of operations that were serviced from the locally held cache since application startup.
C32 dsaSlaveHits	1.3.6.1.2.1.29.2.1.5	Counter32	read-only	Number of operations that were serviced from the locally held object replications [ shadow entries] since application startup.
dsaIntTable	1.3.6.1.2.1.29.3		not-accessible	Each row of this table contains some details related to the history of the interaction of the monitored DSAs with their respective peer DSAs.
dsaIntEntry	1.3.6.1.2.1.29.3.1		not-accessible	Entry containing interaction details of a DSA with a peer DSA.
INT dsaIntIndex	1.3.6.1.2.1.29.3.1.1	INTEGER	not-accessible	Together with applIndex it forms the unique key to identify the conceptual row which contains useful info on the (attempted) interaction between the DSA (referred to by applIndex) and a peer DSA.
DIS dsaName	1.3.6.1.2.1.29.3.1.2	DistinguishedName	read-only	Distinguished Name of the peer DSA to which this entry pertains.
TIM dsaTimeOfCreation	1.3.6.1.2.1.29.3.1.3	TimeStamp	read-only	The value of sysUpTime when this row was created. If the entry was created before the network management subsystem was initialized, this object will contain a value of zero.
TIM dsaTimeOfLastAttempt	1.3.6.1.2.1.29.3.1.4	TimeStamp	read-only	The value of sysUpTime when the last attempt was made to contact this DSA. If the last attempt was made before the network management subsystem was initialized, this object will contain a value of zero.
TIM dsaTimeOfLastSuccess	1.3.6.1.2.1.29.3.1.5	TimeStamp	read-only	The value of sysUpTime when the last attempt made to contact this DSA was successful. If there have been no successful attempts this entry will have a value of zero. If the last successful attempt was made before the network management subsystem was initialized, this object will contain a value of zero.
C32 dsaFailuresSinceLastSuccess	1.3.6.1.2.1.29.3.1.6	Counter32	read-only	The number of failures since the last time an attempt to contact this DSA was successful. If there has been no successful attempts, this counter will contain the number of failures since this entry was created.
C32 dsaFailures	1.3.6.1.2.1.29.3.1.7	Counter32	read-only	Cumulative failures since the creation of this entry.
C32 dsaSuccesses	1.3.6.1.2.1.29.3.1.8	Counter32	read-only	Cumulative successes since the creation of this entry.
dsaConformance	1.3.6.1.2.1.29.4
dsaGroups	1.3.6.1.2.1.29.4.1
dsaOpsGroup	1.3.6.1.2.1.29.4.1.1			A collection of objects for monitoring the DSA operations.
dsaEntryGroup	1.3.6.1.2.1.29.4.1.2			A collection of objects for monitoring the DSA entry statistics and cache performance.
dsaIntGroup	1.3.6.1.2.1.29.4.1.3			A collection of objects for monitoring the DSA's interaction with peer DSAs.
dsaCompliances	1.3.6.1.2.1.29.4.2
dsaOpsCompliance	1.3.6.1.2.1.29.4.2.1			The compliance statement for SNMPv2 entities which implement the DSA-MIB for monitoring DSA operations.
dsaEntryCompliance	1.3.6.1.2.1.29.4.2.2			The compliance statement for SNMPv2 entities which implement the DSA-MIB for monitoring DSA operations, entry statistics and cache performance.
dsaIntCompliance	1.3.6.1.2.1.29.4.2.3			The compliance statement for SNMPv2 entities which implement the DSA-MIB for monitoring DSA operations and the interaction of the DSA with peer DSAs.

RFC description

Defines managed objects for monitoring directory servers, including X.500 DSAs and LDAP servers, tracking access statistics, operations, and peer interactions.

Start monitoring X.500 Directory System Agent / LDAP directory server (vendor-neutral) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download DSA-MIB