Deployment Scenarios

Scenario 1: Auditor Is Not a Part of the Partition in Which NAAS Is Configured

The following figure depicts a scenario in which the user who is configured as an auditor is not a part of the partition in which NAAS is configured.

Here, NAAS is configured in the Partition P1 and the auditor exists in the Partition P2.

Figure 3
Configuration Setup

Proceed with the following steps to bring up NAAS in this scenario:

1. Grant the NAAS Server the Read right to the naasDomainList, and naasSelectedDomain attributes of the Auditor.

2. Grant the Auditor to the read right to naasserversList attributes of that Auditor.

3. Grant the NAAS Server the read right to all attributes of the Auditor Query domain for that Auditor.

Scenario 2: NAAS Agent Is Not a Part of the Partition in Which NAAS is Configured

The following figure depicts a scenario in which the NAAS Agent is not a part of the partition in which NAAS is configured.

Here, NAAS is configured in the Partition P1 and the NAAS Agent exists in the Partition P2.

Figure 4
Configuration Setup

Scenario 3: NAAS Agent and NAAS Server Are Not Present in the Same Partition as the eDirectory server

Invalid Setups

NAAS auditing and reporting will not be performed for following scenarios:

NAAS Agent, NAAS Server and eDirectory Server are in Independent Partitions

Figure 5
Invalid Configuration Setup

NAAS Agent and NAAS Server are in the partition P1 and eDirectory Server is in the child partition P2

Figure 6
Invalid Configuration Setup

eDirectory Server is in Parent Partition and NAAS Agent and NAAS Server are in Child Partition

Figure 7
Invalid Configuration Setup

Valid Setup

Ensure that the NAAS Agent and the NAAS Server reside in the same partition in which the eDirectory server exists, as illustrated below.

Figure 8
Valid Configuration Setup - NAAS Agent, NAAS Server and eDirectory server are existing in the same partition

Scenario 4: The Auditor Query Domain and NAAS Server Are in Different Partitions

The following diagram depicts a scenario in which the Auditor Query domain set for the auditor and the NAAS Server are in two different partitions.

Here, the NAAS Server exists in Partition P1 and the Auditor Query Domain exists in the Partition P2.

Ensure that the NAAS Server has the read right to all the objects in the Auditor Query domain set for that Auditor.

Figure 9
Configuration Setup