nsdb-delete-nsdb (8) - Linux Manuals

nsdb-delete-nsdb: remove all FedFS info from an NSDB

NAME

nsdb-delete-nsdb - remove all FedFS info from an NSDB

SYNOPSIS

nsdb-delete-nsdb [-?d] [-D binddn] [-l nsdbname] [-r nsdbport] nce

INTRODUCTION

RFC 5716 introduces the Federated File System (FedFS, for short). FedFS is an extensible standardized mechanism by which system administrators construct a coherent namespace across multiple file servers using file system referrals. For further details, see fedfs(7).

The bulk of FedFS junction information in a FedFS domain is stored on one or more LDAP servers. These servers are known as namespace databases, or NSDBs, for short.

FedFS-enabled file servers and clients access the information stored on NSDBs via standard LDAP queries. FedFS-enabled file servers use these queries to resolve FedFS junctions. FedFS administrators use them to manage information about file sets contained in a FedFS domain name space.

DESCRIPTION

The nsdb-delete-nsdb(8) command is part of a collection of low-level single-use programs that is intended for testing the NSDB protocol or for use in scripts. This command wipes part or all of an NSDB clean by disconnecting an NSDB Container Entry, or NCE, and removing all FedFS records under it.

This command has one positional parameter which specifies the fully qualified distinguished name of the NCE to be removed.

The nsdb-delete-nsdb(8) command first removes the NSDB container information for the specified NCE to prevent FedFS-enabled clients and servers from accessing the FedFS records under that NCE. Then, it removes all FSN and FSL records under the NCE. The entry that was the NCE is left on the LDAP server.

OPTIONS

-d, --debug

Enables debugging messages during operation.

-?, --help

Displays nsdb-delete-nsdb(8) version information and a usage message on stderr.

-D, --binddn=bind-distinguished-name

Specifies a distinguished name of an entity used to bind to the LDAP server where the NSDB resides. If the --binddn option is not specified, the value of the FEDFS_NSDB_ADMIN environment variable is consulted. If this variable is not set, the NSDB connection parameter database is searched for this DN. If none of these is specified, or if this entity does not have permission to modify this area of the server's DIT, the nsdb-delete-nsdb(8) command fails.

-e, --nce=NSDB-container-entry-distinguished-name

Specifies the distinguished name of the NSDB Container Entry. This option must be specified on the command line. No default value is assumed or read from an environment variable.

-l, --nsdbname=NSDB-hostname

Specifies the hostname of the NSDB where the NSDB Container Entry resides. If the --nsdbname option is not specified, the value of the FEDFS_NSDB_HOST environment variable is consulted. If the variable is not set and the --nsdbname option is not specified, the nsdb-delete-nsdb(8) command fails.

-r, --nsdbport=NSDB-port

Specifies the IP port of the NSDB where the NSDB Container Entry resides. If the --nsdbport option is not specified, the value of the FEDFS_NSDB_PORT environment variable is consulted. The default value if the variable is not set is 389.

EXIT CODES

The NSDB returns a value that reflects the success of the requested operation.

FEDFS_OK

The LDAP modify request succeeded.

FEDFS_ERR_ACCESS

The bound entity does not have permission to perform the requested operation.

FEDFS_ERR_INVAL

One of the arguments was not valid.

FEDFS_ERR_SVRFAULT

An unanticipated non-protocol error occurred.

FEDFS_ERR_NSDB_ROUTE

The nsdb-delete-nsdb(8) command was unable to find a route to the specified NSDB.

FEDFS_ERR_NSDB_DOWN

The nsdb-delete-nsdb(8) command determined that the specified NSDB was down.

FEDFS_ERR_NSDB_CONN

The nsdb-delete-nsdb(8) command was unable to establish a connection with the specified NSDB.

FEDFS_ERR_NSDB_AUTH

The nsdb-delete-nsdb(8) command was unable to authenticate and establish a secure connection with the specified NSDB.

FEDFS_ERR_NSDB_LDAP

A non-specific LDAP error occurred on the connection between the nsdb-delete-nsdb(8) command and specified NSDB.

FEDFS_ERR_NSDB_LDAP_VAL

An LDAP error occurred on the connection between the nsdb-delete-nsdb(8) command and specified NSDB. The specific error may be displayed on the command line.

FEDFS_ERR_NSDB_RESPONSE

The nsdb-delete-nsdb(8) command received a malformed response from the specified NSDB.

FEDFS_ERR_NSDB_FAULT

An unanticipated error related to the specified NSDB occurred.

FEDFS_ERR_NSDB_PARAMS

The local NSDB connection parameter database does not have any connection parameters on record for the specified NSDB.

FEDFS_ERR_NSDB_LDAP_REFERRAL

The nsdb-delete-nsdb(8) command received an LDAP referral that it was unable to follow.

FEDFS_ERR_NSDB_LDAP_REFERRAL_VAL

The nsdb-delete-nsdb(8) command received an LDAP referral that it was unable to follow. A specific error may be displayed on the command line.

FEDFS_ERR_NSDB_LDAP_REFERRAL_NOTFOLLOWED

The nsdb-delete-nsdb(8) command received an LDAP referral that it chose not to follow, either because the local implementation does not support following LDAP referrals or LDAP referral following is disabled.

FEDFS_ERR_NSDB_PARAMS_LDAP_REFERRAL

The nsdb-delete-nsdb(8) command received an LDAP referral that it chose not to follow because the local NSDB connection parameter database had no connection parameters for the NSDB targeted by the LDAP referral.

EXAMPLES

Suppose you are the FedFS administrator of the example.net FedFS domain and that you want to wipe the NCE o=fedfs from the LDAP server ldap.example.net.

$ nsdb-delete-nsdb -l ldap.example.net -D cn=Manager -e o=fedfs
Enter NSDB password:
Successfully removed NCE

This action removes all FedFS records under o=fedfs. Compare with the action of the nsdb-remove-nci(8) command.

SECURITY

An entity with appropriate authority, such as an administrator entity, must be used to modify LDAP entries. The nsdb-delete-nsdb(8) command must bind as such an entity to perform this operation. The nsdb-delete-nsdb(8) command asks for a password on stdin. Standard password blanking techniques are used to obscure the password on the user's terminal.

The target LDAP server must be registered in the local NSDB connection parameter database. The connection security mode listed in the NSDB connection parameter database for the target LDAP server is used during this operation. See nsdbparams(8) for details on how to register an NSDB in the local NSDB connection parameter database.

COLOPHON

This page is part of the fedfs-utils package. A description of the project and information about reporting bugs can be found at http://wiki.linux-nfs.org/wiki/index.php/FedFsUtilsProject.

AUTHOR

Chuck Lever <chuck.lever [at] oracle.com>