HP UX LDAP-UX Integration Software manual Managing the LP printer conﬁguration, Example

Page 102

LDAP Printer Conﬁgurator Support

Managing the LP printer conﬁguration

Managing the LP printer conﬁguration

The LDAP-UX Client Services provide the printer conﬁgurator integration; the product daemon automatically updates the remote LP printer conﬁguration of a client system based on the available printer objects in the Directory Server. The printer conﬁgurator provides the printer conﬁguration management; it veriﬁes if the printer conﬁguration has any conﬂict with the LP printer conﬁgurations in the client system before it actually adds or deletes a printer.

Following are ﬁve examples to show how the LDAP printer conﬁgurator provides central management of printer services based on the printer objects stored in the Directory Server:

Example 1:

An administrator sets up a new printer located in the Engineering Lab and wants this printer to be shared. This printer is physically connected to a system hostA and is set up as a local printer lj2004. The administrator creates a new printer entry in the directory server as follow:

dn: printer-name=laser2,ou=printers,dc=hp,dc=com

printer-name: laser2

printer-uri: lpd://hostA.hp.com/lj2004

A new printer conﬁguration for laser2 is created automatically in every client system if the LDAP printer conﬁgurator is running. The print queue for laser2 is enabled and ready to accept print jobs. Users can sent their print jobs to laser2 by typing lp -dlaser2ﬁlename.

Example 2:

IT department would like to store additional service information in the printer object. The administrator modifies the printer object by adding more printer attributes. The modified content of the printer object is shown as below:

dn: printer-name=laser2,ou=printers,dc=hp,dc=com

printer-name: laser2

printer-uri: lpd://hostA.cup.hp.com/lj2004

printer-location: Engineering Lab

printer-model: Hewlett Packard laserjet Model 2004N

printer-service-person: David Lott

88

Chapter 3

Image 102

Contents Edition Manufacturing Part Number J4269-90071 E0207Legal Notices Contents Administering LDAP-UX Client Services Command and Tool Reference User Tasks Tables Viii Figures Figures Intended Audience New and Changed Documentation in This EditionPublishing History What’s in This documentXiii Typographical Conventions HP Encourages Your CommentsOverview of LDAP-UX Client Services ChapterOverview of LDAP-UX Client Services Simpliﬁed NIS EnvironmentSimpliﬁed LDAP-UX Client Services Environment How LDAP-UX Client Services WorksTrafﬁc from replica updates IntroductionExamples of Commands and Subsystems Commands that use Commands that use PAMThat use PAM and NSS Login, ftpd Ls, who Overview of LDAP-UX Client Services Local Start-up File and the Conﬁguration Proﬁle Overview of LDAP-UX Client Services Chapter LDAP-UX Client Services Before You BeginSummary of Installing and Conﬁguring Summary of Installing and ConﬁguringOptionally modify the /etc/opt/ldapux/pamauthz.policy Plan Your Installation Plan Your InstallationStill log in to the system Share user names and passwords with other applications, Example Directory Structure Plan Your Installation Plan Your Installation Section must be set to yes. If the start option is enabled, Plan Your Installation Install LDAP-UX Client Services on a Client Install LDAP-UX Client Services on a ClientConﬁgure Your Directory Conﬁgure Your DirectoryStep Conﬁgure Your Directory Grant read access of all attributes of the posix schema Conﬁgure Your Directory Import Name Service Data into Your Directory Import Name Service Data into Your DirectorySteps to Importing Name Service Data into Your DirectoryConﬁgure the LDAP-UX Client Services Conﬁgure the LDAP-UX Client ServicesConﬁgure the LDAP-UX Client Services Quick Conﬁguration Required to start the services Simple Sasl DIGEST-MD5 Conﬁguration Parameter Default Values Conﬁgure the LDAP-UX Client Services Custom Conﬁguration Specify up to three directory hosts, to be searched in order Specify the service you want to map? Specify the attribute you want to map You type 0 to exit this menu for the following question Answer Y instead of the default N For the question You want to create a custom search descriptor for Conﬁgure the LDAP-UX Client Serivces with SSL Support Conﬁgure the LDAP-UX Client Serivces with SSL SupportConﬁguring the LDAP-UX Client to Use SSL Steps to Download the CA Certiﬁcate from Mozilla BrowserMail users, and Trust the CA to identify software developers Steps to create database ﬁles using the certutil utility Use the rm command to remove the old database ﬁlesConﬁgure the LDAP-UX Client Serivces with SSL Support Conﬁgure LDAP-UX Client Services with Publickey Support Conﬁgure LDAP-UX Client Services with Publickey SupportEnhanced Publickey-LDAP Software for HP-UX 11i v1 or JuneOctober Extending the Publickey Schema into Your Directory Admin Proxy UserConﬁguring an Admin Proxy User Using ldapproxyconﬁg Setting ACI for an Admin Proxy User Setting ACI for Key ManagementPassword for an Admin Proxy User An ExampleConﬁguring serviceAuthenticationMethod Setting ACI for a UserAuthentication Methods Procedures Used to Conﬁgure serviceAuthenticationMethodServiceAuthenticationMethodkeyservsasl/digest-md5 Conﬁguring Name Service Switch Conﬁgure LDAP-UX Client Services with Publickey Support AutoFS Patch Requirement Automount SchemasAutoFS Support AutoFS SupportNew Automount Schema SchemaAn Example NisObject Automount Schema Obsolete Automount Schema Removing The Obsolete Automount SchemaLimitations Attribute Mappings Attribute Mappings New Automount Attribute NisObject AutomountAutoFS Migration Scripts Migration Scripts DescriptionEnvironment Variables Examples General Syntax For Migration ScriptsMigrateautomount.pl Script SyntaxAutoFS Support Migratenisautomount.pl Script Following shows the /tmp/autoindirect.ldif ﬁleMigratenispautofs.pl Script Following shows the nispautomap.ldif ﬁleVerify the LDAP-UX Client Services Verify the LDAP-UX Client ServicesMaking sure the output is as expected Verify the LDAP-UX Client Services #cat /etc/nsswitch.conf Conﬁgure Subsequent Client Systems Conﬁgure Subsequent Client SystemsChange the current conﬁguration Download the Proﬁle Periodically Download the Proﬁle PeriodicallyCrontab crontab.profile Use r-command for Pamldap Use r-command for Pamldap#passwordas = Password, and turning on the rcommand option for pamldap Use r-command for Pamldap Chapter Ldap Printer Conﬁgurator Overview DeﬁnitionsOverview System How the Ldap Printer Conﬁgurator works How the Ldap Printer Conﬁgurator worksSystem administrator manually adds or removes printers to Printer Conﬁgurator Architecture Printer Conﬁguration Parameters Printer Conﬁguration ParametersPrinter Schema Printer SchemaAn Example Printer Schema Managing the LP printer conﬁguration Managing the LP printer conﬁgurationExample Managing the LP printer conﬁguration Managing the LP printer conﬁguration Limitations of Printer Conﬁgurator Limitations of Printer ConﬁguratorLimitations of Printer Conﬁgurator Chapter Administering LDAP-UX Client Using The LDAP-UX Client Daemon Using The LDAP-UX Client DaemonOverview Controlling the client LdapclientdStarting the client Client Daemon performanceCommand options DiagnosticsMissing settings Ldapclientd.confConﬁguration ﬁle syntax Opt/ldapux/conﬁg/setup Using The LDAP-UX Client Daemon 100 Chapter 101 102 Chapter 103 Conﬁguration File Integrating with Trusted Mode Integrating with Trusted ModeFeatures and Limitations AuditingPassword and Account Policies PAM Conﬁguration File OthersChapter 107 Conﬁguration Parameter Pamauthz Login Authorization Enhancement Pamauthz Login Authorization EnhancementPolicy And Access Rules Chapter 109How Login Authorization Works Pamauthz EnvironmentPolicy File Chapter 111Field Syntax in an Access Rule Constructing an Access Rule in pamauthz.policyFields in an Access Rule ActiontyperuleChapter 113 No value is required ActionChapter 115 116 Policy Validator Chapter 117Adding a Directory Replica Adding a Directory ReplicaAn Example of /etc/opt/ldapux/pamauthz.policy File Displaying the Proxy User’s DN Displaying the Proxy User’s DNChapter 119 Example Verifying the Proxy UserCreating a New Proxy User Verifying the Proxy UserDisplaying the Current Proﬁle Displaying the Current ProﬁleCreating a New Proﬁle Chapter 121Changing Which Proﬁle a Client Is Using Modifying a ProﬁleModifying a Proﬁle Changing from Proxy Access to Anonymous Access Changing from Anonymous Access to ProxyAccess Changing from Anonymous Access to Proxy AccessChanging from Proxy Access to Anonymous Access Performance Considerations Performance ConsiderationsMinimizing Enumeration Requests Chapter 125Client Daemon Performance Ldapclientd CachingClient Daemon Performance Map Name Beneﬁts Example Side-Effect Chapter 127128 Chapter 129 Ldapclientd Persistent Connections Enabling and Disabling LDAP-UX Logging TroubleshootingTroubleshooting Chapter 131Enabling and Disabling PAM Logging TIPNetscape Directory Server Log Files User Cannot Log on to Client SystemChapter 133 134 You should get output like the following Chapter 135136 Command and Tool Reference Chapter 137LDAP-UX Client Services Components LDAP-UX Client Services ComponentsLDAP-UX Client Services Components Description LDAP-UX Client Services Components Component DescriptionChapter 139 LDAP-UX Client Services Libraries on the HP-UX 11.0 or 11i PA machine Files DescriptionLDAP-UX Client Services Libraries on the HP-UX 11i v2 PA Machine Files DescriptionChapter 141 LDAP-UX Client Services Libraries on the HP-UX 11i v2 IA Createproﬁlecache Tool Client Management ToolsCreateproﬁleentry Tool Client Management ToolsCreateproﬁleschema Tool Displayproﬁlecache ToolGetproﬁleentry Tool Chapter 145Ldapproxyconﬁg Tool Getprofileentry -s NSSFile Chapter 147148 Chapter 149 Beq Search Tool SyntaxBeq Search Tool Examples Chapter 151152 Uid2dn Tool Chapter 153Ldap Directory Tools Getattrmap.pl ToolLdap Directory Tools Ldapentry Chapter 155156 Ldapsearch Chapter 157Ldapmodify Ldapdelete Certutil Adding One or More Users Adding One or More UsersChapter 159 Default Naming Context Name Service Migration ScriptsName Service Migration Scripts Naming ContextMigrating All Your Files Migrating Individual FilesChapter 161 General Syntax for Perl Migration Scripts Migration ScriptsMigration Scripts Script Name Description Script Name Description Chapter 163164 Chapter 165 Ldappasswd Command Ldappasswd CommandChapter 167 168 To Change Passwords Chapter 169To Change Passwords Cannot Change Passwords on Replica ServersChapter 171 172 To Change Personal Information To Change Personal InformationChapter 173 174 Mozilla Ldap C SDK Chapter 175176 Mozilla Ldap C SDK File Components on the PA machine Mozilla Ldap C SDK File ComponentsMozilla Ldap C SDK File Components Files DescriptionMozilla Ldap C SDK File Components on the IA machine Chapter 179 Mozilla Ldap C SDK API Header Files Header Files DescriptionChapter 181 182 Table A-1 LDAP-UX Client Services Conﬁguration Worksheet Appendix a 183Appendix a Appendix a 185 186 Classes Appendix B 187Proﬁle Attributes Proﬁle AttributesAppendix B Appendix B 189 190 ﬁle Appendix C 191Sample /etc/pam.ldap.trusted ﬁle Appendix CAppendix C 193 194 Ldap Data Interchange Format Ldif PAM Authorization Service ModuleGlossary Glossary 195Slapd GlossarySymbols IndexNIS, 2, 12, 15 Pwget, 4, 69 200

Related manuals

Manual 26 pages 60.39 Kb

Manual 65 pages 7.83 Kb