NSLDAP-MIB

All MIBs › NSLDAP-MIB

Organization: Netscape Communications Corp

Last Updated: 1997-07-31

Category: Applications

Description: Manages Netscape Directory Server LDAP agent operation counters, connection state, and replication status.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is NSLDAP-MIB?

NSLDAP-MIB is a Netscape Communications (later Sun/iPlanet) vendor-specific MIB implementing the IETF MADMAN LDAP/X.500 directory-monitoring draft (draft-ietf-madman-ds-mib) for the Netscape/iPlanet Directory Server, exposing operational counters, cache/replication statistics, and peer-DS interaction history. It models bind and operation counters in dsOpsTable (dsAnonymousBinds, dsSimpleAuthBinds, dsSearchOps, dsBindSecurityErrors, dsErrors), entry and cache statistics in dsEntriesTable (dsMasterEntries, dsCacheEntries, dsCacheHits, dsSlaveHits), and per-peer replication/chaining history in dsIntTable (dsTimeOfLastSuccess, dsFailuresSinceLastSuccess, dsURL). This gives an operator visibility into authentication load, search/query volume, cache effectiveness, and the health of replication or chaining relationships with other directory servers. It depends on NETWORK-SERVICES-MIB for the applIndex used to index all its per-application tables, and defines two legacy RFC-1215 TRAP-TYPEs, nsDirectoryServerDown and nsDirectoryServerStart, for service-level up/down monitoring. It is deployed on Netscape/iPlanet Directory Server 5 installations providing LDAP directory services, and administrators can download the NSLDAP-MIB file to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in NSLDAP-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Netscape/iPlanet Directory Server 5 (LDAP directory server)

Monitoring Examples

An operator polls dsOpsTable for dsBindSecurityErrors and dsErrors alongside dsIntTable's dsFailuresSinceLastSuccess for each replication peer; a rising security-error count combined with growing consecutive replication failures to a specific peer DS would indicate either an authentication attack or a broken replication agreement needing attention.

What Can Be Monitored

bind operation counters (anonymous/simple/strong auth, security errors)
search/read/modify/compare operation counters
entry cache hit and replication (slave) hit counters
master/copy/cache entry counts
peer directory server replication success/failure history
directory server up/down notifications

Imported Objects

From NETWORK-SERVICES-MIB

DistinguishedName
URLString
applIndex	OBJECT-TYPE

From RFC-1215

TRAP-TYPE

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Gauge32
MODULE-IDENTITY
OBJECT-TYPE
enterprises

From SNMPv2-TC

DisplayString
TimeStamp

How to Use in IPNetwork Monitor

Example using dsAnonymousBinds OID:

Select a Netscape/iPlanet Directory Server 5 (LDAP directory server) as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type dsAnonymousBinds into the Find box to locate it in the OID tree, then select it and click OK. It reports the number of anonymous binds to this DS from UAs since application start. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline, since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
netscape	1.3.6.1.4.1.1450
NTF nsDirectoryServerDown	1.3.6.1.4.1.1450.0.7001			This trap is generated whenever the agent detects the directory server to be (potentially) Down.
NTF nsDirectoryServerStart	1.3.6.1.4.1.1450.0.7002			This trap is generated whenever the agent detects the directory server to have (re)started.
nsldap	1.3.6.1.4.1.1450.7			An implementation of the MADMAN mib for monitoring LDAP/CLDAP and X.500 directories described in internet draft: draft-ietf-madman-ds-mib-103.txt used for iPlanet Directory Server 5
dsOpsTable	1.3.6.1.4.1.1450.7.1		not-accessible	The table holding information related to the DS operations.
dsOpsEntry	1.3.6.1.4.1.1450.7.1.1		not-accessible	Entry containing operations related statistics for a DS.
C32 dsAnonymousBindsEx	1.3.6.1.4.1.1450.7.1.1.1	Counter32	read-only	Number of anonymous binds to this DS from UAs since application start.
C32 dsUnAuthBinds	1.3.6.1.4.1.1450.7.1.1.2	Counter32	read-only	Number of un-authenticated binds to this DS since application start.
C32 dsSimpleAuthBinds	1.3.6.1.4.1.1450.7.1.1.3	Counter32	read-only	Number of binds to this DS that were authenticated using simple authentication procedures since application start.
C32 dsStrongAuthBinds	1.3.6.1.4.1.1450.7.1.1.4	Counter32	read-only	Number of binds to this DS that were authenticated using the strong authentication procedures since application start. This includes the binds that were authenticated using external authentication procedures.
C32 dsBindSecurityErrors	1.3.6.1.4.1.1450.7.1.1.5	Counter32	read-only	Number of bind operations that have been rejected by this DS due to inappropriateAuthentication or invalidCredentials.
C32 dsInOps	1.3.6.1.4.1.1450.7.1.1.6	Counter32	read-only	Number of operations forwarded to this DS from UAs or other DSs since application start up.
C32 dsReadOps	1.3.6.1.4.1.1450.7.1.1.7	Counter32	read-only	Number of read operations serviced by this DS since application startup.
C32 dsCompareOps	1.3.6.1.4.1.1450.7.1.1.8	Counter32	read-only	Number of compare operations serviced by this DS since application startup.
C32 dsAddEntryOps	1.3.6.1.4.1.1450.7.1.1.9	Counter32	read-only	Number of addEntry operations serviced by this DS since application startup.
C32 dsRemoveEntryOps	1.3.6.1.4.1.1450.7.1.1.10	Counter32	read-only	Number of removeEntry operations serviced by this DS since application startup.
C32 dsModifyEntryOps	1.3.6.1.4.1.1450.7.1.1.11	Counter32	read-only	Number of modifyEntry operations serviced by this DS since application startup.
C32 dsModifyRDNOps	1.3.6.1.4.1.1450.7.1.1.12	Counter32	read-only	Number of modifyRDN operations serviced by this DS since application startup.
C32 dsListOps	1.3.6.1.4.1.1450.7.1.1.13	Counter32	read-only	Number of list operations serviced by this DS since application startup.
C32 dsSearchOps	1.3.6.1.4.1.1450.7.1.1.14	Counter32	read-only	Number of search operations- baseObject searches, oneLevel searches and wholeSubtree searches, serviced by this DS since application startup.
C32 dsOneLevelSearchOps	1.3.6.1.4.1.1450.7.1.1.15	Counter32	read-only	Number of oneLevel search operations serviced by this DS since application startup.
C32 dsWholeSubtreeSearchOps	1.3.6.1.4.1.1450.7.1.1.16	Counter32	read-only	Number of wholeSubtree search operations serviced by this DS since application startup.
C32 dsReferrals	1.3.6.1.4.1.1450.7.1.1.17	Counter32	read-only	Number of referrals returned by this DS in response to requests for operations since application startup.
C32 dsChainings	1.3.6.1.4.1.1450.7.1.1.18	Counter32	read-only	Number of operations forwarded by this DS to other DSs since application startup.
C32 dsSecurityErrors	1.3.6.1.4.1.1450.7.1.1.19	Counter32	read-only	Number of operations forwarded to this DS which did not meet the security requirements.
C32 dsErrors	1.3.6.1.4.1.1450.7.1.1.20	Counter32	read-only	Number of operations that could not be serviced due to errors other than security errors, and referrals. A partially serviced operation will not be counted as an error. The errors include NameErrors, UpdateErrors, Attribute errors and ServiceErrors.
dsEntriesTable	1.3.6.1.4.1.1450.7.2		not-accessible	The table holding information related to the entry statistics and cache performance of the DSs.
dsEntriesEntry	1.3.6.1.4.1.1450.7.2.1		not-accessible	Entry containing statistics pertaining to entries held by a DS.
G32 dsMasterEntries	1.3.6.1.4.1.1450.7.2.1.1	Gauge32	read-only	Number of entries mastered in the DS.
G32 dsCopyEntries	1.3.6.1.4.1.1450.7.2.1.2	Gauge32	read-only	Number of entries for which systematic (slave) copies are maintained in the DS.
G32 dsCacheEntries	1.3.6.1.4.1.1450.7.2.1.3	Gauge32	read-only	Number of entries cached (non-systematic copies) in the DS. This will include the entries that are cached partially. The negative cache is not counted.
C32 dsCacheHits	1.3.6.1.4.1.1450.7.2.1.4	Counter32	read-only	Number of operations that were serviced from the locally held cache since application startup.
C32 dsSlaveHits	1.3.6.1.4.1.1450.7.2.1.5	Counter32	read-only	Number of operations that were serviced from the locally held object replications ( shadow entries) since application startup.
dsIntTable	1.3.6.1.4.1.1450.7.3		not-accessible	Each row of this table contains some details related to the history of the interaction of the monitored DSs with their respective peer DSs.
dsIntEntry	1.3.6.1.4.1.1450.7.3.1		not-accessible	Entry containing interaction details of a DS with a peer DS.
INT dsIntIndex	1.3.6.1.4.1.1450.7.3.1.1	INTEGER	not-accessible	Together with applIndex it forms the unique key to identify the conceptual row which contains useful info on the (attempted) interaction between the DS (referred to by applIndex) and a peer DS.
DIS dsName	1.3.6.1.4.1.1450.7.3.1.2	DistinguishedName	read-only	Distinguished Name of the peer DS to which this entry pertains.
TIM dsTimeOfCreation	1.3.6.1.4.1.1450.7.3.1.3	TimeStamp	read-only	The value of sysUpTime when this row was created. If the entry was created before the network management subsystem was initialized, this object will contain a value of zero.
TIM dsTimeOfLastAttempt	1.3.6.1.4.1.1450.7.3.1.4	TimeStamp	read-only	The value of sysUpTime when the last attempt was made to contact this DS. If the last attempt was made before the network management subsystem was initialized, this object will contain a value of zero.
TIM dsTimeOfLastSuccess	1.3.6.1.4.1.1450.7.3.1.5	TimeStamp	read-only	The value of sysUpTime when the last attempt made to contact this DS was successful. If there have been no successful attempts this entry will have a value of zero. If the last successful attempt was made before the network management subsystem was initialized, this object will contain a value of zero.
C32 dsFailuresSinceLastSuccess	1.3.6.1.4.1.1450.7.3.1.6	Counter32	read-only	The number of failures since the last time an attempt to contact this DS was successful. If there has been no successful attempts, this counter will contain the number of failures since this entry was created.
C32 dsFailures	1.3.6.1.4.1.1450.7.3.1.7	Counter32	read-only	Cumulative failures since the creation of this entry.
C32 dsSuccesses	1.3.6.1.4.1.1450.7.3.1.8	Counter32	read-only	Cumulative successes since the creation of this entry.
STR dsURL	1.3.6.1.4.1.1450.7.3.1.9	URLString	read-only	URL of the DS application.
dsEntityTable	1.3.6.1.4.1.1450.7.5		not-accessible	This table holds general information related to an installed instance of a directory server
dsEntityEntry	1.3.6.1.4.1.1450.7.5.1		not-accessible	Entry of general information about an installed instance of a directory server
STR dsEntityDescr	1.3.6.1.4.1.1450.7.5.1.1	DisplayString	read-only	A general textual description of this directory server.
STR dsEntityVers	1.3.6.1.4.1.1450.7.5.1.2	DisplayString	read-only	The version of this directory server
STR dsEntityOrg	1.3.6.1.4.1.1450.7.5.1.3	DisplayString	read-only	Organization responsible for directory server at this installation
STR dsEntityLocation	1.3.6.1.4.1.1450.7.5.1.4	DisplayString	read-only	Physical location of this entity (directory server). For example: hostname, building number, lab number, etc.
STR dsEntityContact	1.3.6.1.4.1.1450.7.5.1.5	DisplayString	read-only	Contact person(s)responsible for the directory server at this installation, together with information on how to conact.
STR dsEntityName	1.3.6.1.4.1.1450.7.5.1.6	DisplayString	read-only	Name assigned to this entity at the installation site

RFC description

MIB for monitoring LDAP/CLDAP and X.500 directories in iPlanet Directory Server.

Start monitoring Netscape/iPlanet Directory Server 5 (LDAP directory server) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download NSLDAP-MIB