Configuring Ldap, Standard Distribution Tools | Apple oxs specification

LDAP

Configuring LDAP

The following tools are available for configuring LDAP. For more information, see the man page for each tool.

slapconfig

You can use the slapconfig utility to configure the slapd and slurpd LDAP daemons and related search policies. For more information, type man slapconfig to see the man page.

Standard Distribution Tools

These tools are included in the standard LDAP distribution.

Program	Used to
/usr/bin/ldapadd	Add entries to the LDAP directory.

/usr/bin/ldapcompare	Compare a directory entry’s actual attributes with known
	attributes.

/usr/bin/ldapdelete	Delete entries from the LDAP directory.

/usr/bin/ldapmodify	Change an entry’s attributes.

/usr/bin/ldapmodrdn	Change an entry’s relative distinguished name (RDN).

/usr/bin/ldappasswd	Set the password for an LDAP user.
	Apple recommends using passwd instead of ldappasswd. For
	more information, type man passwd.

/usr/bin/ldapsearch	Search the LDAP directory. See the usage note under “A Note on
	Using ldapsearch” on this page.

/usr/bin/ldapwhoami	Obtain the primary authorization identity associated with a user.

/usr/sbin/slapadd	Add entries to the LDAP directory.

/usr/sbin/slapcat	Export LDAP Directory Interchange Format files.

/usr/sbin/slapindex	Regenerate directory indexes.

/usr/sbin/slappasswd	Generate user password. hashes.

A Note on Using ldapsearch

The ldapsearch tool connects to an LDAP server, binds to it, finds entries, and returns attributes of the entries found.

By default, ldapsearch tries to connect to the LDAP server using the Simple Authentication and Security Layer (SASL) method. If the server doesn’t support this method, you see this error message:

ldap_sasl_interactive_bind_s: No such attribute (16)

To avoid this, include the -xoption when you type the command. For example:

ldapsearch -h 192.168.100.1 -b "dc=ecxample,dc=com" -x

Chapter 14 Working With Open Directory

157

Image 157

Apple oxs manual Configuring Ldap, Standard Distribution Tools, Program Used to

Contents

Mac OS X Server Command-Line Administration 034-2354/10-24-03 Contents Energy Saver Settings Setting General System PreferencesViewing or Changing Sleep Settings Power Management Settings Mounting and Unmounting Volumes Working With Disks and VolumesMounting Volumes Unmounting Volumes AFP Service Working With File ServicesStarting and Stopping AFP Service Checking AFP Service Status Starting and Stopping Print Service Working With Print ServiceChecking the Status of Print Service Viewing Print Service Settings Changing Settings Using serveradmin 157 Configuring Ldap 156 Changing Open Directory Service Settings 157 171 Index Command Parameters and Options Commands and Other Terminal TextNotation Conventions Summary Commands Requiring Root Privileges Default Settings To open Terminal Using Terminal Repeating Commands Correcting Typing ErrorsIncluding Paths Using Drag-and-Drop To type a command $ sudo serveradmin list Sending a Single Command Sending Commands to a Remote ServerExample ssh -l admin To open a connection to a remote server Updating SSH Key Fingerprints Using Telnet Getting Online Help for CommandsTo enable Telnet access To disable Telnet access Determining Whether a Service Needs to be Restarted ServersetupPage Automating Server Setup Installing Server SoftwareCreating a Configuration File Template To save a template configuration file during server setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Installing Server Software and Finishing Basic Setup Naming Configuration Files Changing Server SettingsStoring a Configuration File in an Accessible Location Updating Server Software Viewing, Validating, and Setting the Software Serial Number Moving a Server Page Automatic Restart ExamplesTo restart the local server To restart a remote server immediately Shutting Down a Server Changing a Remote Server’s Startup DiskTo change the startup disk To shut down a remote server immediately Date and Time Computer NameViewing or Changing the Computer Name To display the server’s computer name Viewing or Changing the System Time Viewing or Changing the System DateViewing or Changing the System Time Zone Viewing or Changing Sleep Settings Energy Saver SettingsViewing or Changing Automatic Restart Settings Viewing or Changing Network Time Server Usage Startup Disk Settings Power Management SettingsViewing or Changing the Startup Disk International Settings Sharing SettingsViewing or Changing Remote Login Settings Viewing or Changing Language Settings To view the current setting Login SettingsDisabling the Restart and Shutdown Buttons Viewing Port Names and Hardware Addresses Viewing or Changing Media Settings Network Port ConfigurationsCreating or Deleting Port Configurations Activating Port Configurations Changing Configuration Precedence TCP/IP SettingsChanging a Server’s IP Address To view TCP/IP settings for port en0 To list TCP/IP settings for a configurationTo view TCP/IP settings for a particular port or device To change TCP/IP settings for a particular port or device Viewing or Changing DNS Servers Proxy Settings AppleTalk SettingsViewing or Changing FTP Proxy Settings Enabling TCP/IP Viewing or Changing Secure Web Proxy Settings Viewing or Changing Web Proxy SettingsViewing or Changing Streaming Proxy Settings Viewing or Changing Gopher Proxy Settings Viewing or Changing Socks Firewall Proxy Settings AirPort SettingsViewing or Changing Airport Settings Computer, Host, and Rendezvous Name Viewing or Changing the Rendezvous Name Viewing or Changing the Local Host NamePage Mounting Volumes Checking for Disk ProblemsUnmounting Volumes Monitoring Disk Space Reclaiming Disk Space Using Log Rolling Scripts Turning on Journaling for an Existing Volume Checking to See if Journaling is EnabledManaging Disk Journaling Example Setting Up a Case-Sensitive HFS+ File System Enabling Journaling When You Erase a DiskErasing, Partitioning, and Formatting Disks Disabling Journaling To image a boot volume Imaging and Cloning Volumes Using ASRTo restore a volume from an image Hdiutil convert -format Udzo pathtoimage -o compressedimage To create a user with a specific UID To create a userTo create a user with a specific UID and home directory To import users and groups Importing Users and Groups Writing a Record Description Creating a Character-Delimited User Import FileUse the shorthand StandardGroupRecord DSRecTypeStandardGroups Using the StandardUserRecord Shorthand Attribute User AttributesFormat Sample values Attribute Format Sample values AdminLimits MCXSettingsAuthentication AuthenticationHint MailAttribute field Description Sample values Mail Attributes in User Records KNotificationState NotificationStateNotificationOff is assumed NotificationStaticIP Value Checking a Server User’s Name, UID, or Password Creating a User’s Home Directory Checking a User’s Administrator PrivilegesCreating a Group Folder Mounting a User’s Home DirectoryPage To list existing share points Listing Share Points To create a share point Creating a Share PointExamples AFP Service List of AFP Settings Changing AFP Settings AdminGetsSp Admin31GetsSpAllowRootLogin AttemptAdminAuth AdminUsers GuestAccessDefault = afpserver LogLogin Default = classicpermissions UnixwithclassicadminpermissionsNoadminkills SpecialAdminPrivs Listing Connected Users List of AFP serveradmin CommandsTo list connected users Output Sending a Message to AFP Users Disconnecting AFP UsersTo send a message To disconnect users To cancel a disconnect Canceling a User DisconnectValue Description To list samples Listing AFP Service Statistics Starting and Stopping NFS Service NFS ServiceChecking NFS Service Status Viewing NFS Settings FTP Service FTP Settings Changing FTP SettingsParameter ftp Ftpcommand= Description List of FTP serveradmin CommandsPage Changing SMB Settings Viewing SMB SettingsTo list all SMB service settings Or see List of SMB Service Settings on Parameter smb Description List of SMB Service Settings Local master Netbios nameLog level Max smbd processes Smbcommand= Description List of SMB serveradmin CommandsListing SMB Users Value returned by getConnectedUsers Disconnecting SMB Users Updating Share Point Information Listing SMB Service Statistics Smb-log Viewing SMB Service LogsVar/log/samba/log.smbd Name-logPage Viewing Print Service Settings Checking the Status of Print Service Print Service Settings Changing Print Service SettingsParameter print Description Parameter printDescription Queue Data Array Here is an example of a queue array parameter block Pausing a Queue Print Service serveradmin CommandsListing Queues To pause a queue Holding a Job Listing Jobs and Job InformationTo hold a job To release the job Viewing Print Service Log FilesPage Viewing NetBoot Settings Checking NetBoot Service Status NetBoot Service Settings Changing NetBoot SettingsGeneral Settings Parameter netboot Description Filters Record Array Storage Record Array Image Record Array IsEnabledAtIndex NetBootPortsRecordsArrayarrayindexmPort Record Array EthernetPage Viewing Mail Service Settings Checking the Status of Mail Service Mail Service Settings Changing Mail Service SettingsParameter mail Description Postfixlmtpsaslpasswordmaps PostfixdisablevrfycommandPostfixsmtpsaslpasswordmaps Postfixsmtpsaslauthenable Postfixmailboxcommand PostfixdeliverlockdelayPostfixdefaultverpdelimiters Postfixcleanupservicename Postfixdisablemimeoutputconversion PostfixforkdelayPostfixsmtpdtimeout Postfixsmtpderrorsleeptime Postfixtriggertimeout PostfixdelaywarningtimePostfixrelaytransport Postfixaliasmaps Postfixalternateconfigdirectories PostfixsmtpdnoopcommandsPostfixdefaulttransport Postfixsmtpddelayreject Postfixipctimeout PostfixqueueservicenamePostfixdefaultprivs Postfixinflowdelay Postfixsmtppixworkarounddelaytime PostfixshowqservicenamePostfixqmqpdtimeout Postfixignoremxlookuperror Postfixcontentfilter PostfixbounceservicenamePostfixqmqpderrordelay Postfixsmtpdsenderloginmaps Postfixlmtpdatadonetimeout PostfixdefaultextrarecipientlimitPostfixlmtpdataxfertimeout Postfixsmtpdatadonetimeout Imapmupdateserver ImappoptimeoutImaptimeout Imapenablepop Imapsrvtab Default = /etc/srvtab Imapimapauthlogin ImapdefaultpartitionImapenableimap Imapallowanonymouslogin Command Mail serveradmin Commands Listing Mail Service Statistics To display the log locations Viewing the Mail Service Logs Generating a CSR and Creating a Keychain Setting Up SSL for Mail Service 120 Importing an SSL Certificate Into the Keychain Obtaining an SSL Certificate Creating a Passphrase File Setting Up SSL for Mail Service on a Headless Server Viewing Web Settings Checking Web Service Status Serveradmin and Apache Settings Changing Web SettingsChanging Settings Using serveradmin An appropriate value for the setting Viewing Service Logs Web serveradmin CommandsListing Hosted Sites To list sites Requestspersecond for Viewing Service StatisticsCacherequestspersecond for Cachethroughput for Addsite File Example Script for Adding a WebsiteAddsite.in File Ipaddress To run the scriptPort Root Starting and Stopping Dhcp Service Dhcp ServiceChecking the Status of Dhcp Service Viewing Dhcp Service Settings Dhcp Service Settings Changing Dhcp Service SettingsParameter dhcp Description About Subnet IDs Dhcp Subnet Settings ArraySubnet Parameter Netaddress LeasetimesecsNetmask Netrangeend To add a subnet Adding a Dhcp SubnetWINSscopeid WINSsecondaryserver Viewing the Dhcp Service Log List of Dhcp serveradmin CommandsCommand Dhcpcommand=Description Location of the DNS service log DNS Service Listing DNS Service Statistics Firewall ServiceStarting and Stopping Firewall Service Sample Output Viewing Firewall Service Settings Checking the Status of Firewall ServiceChanging Firewall Service Settings Firewall Service Settings IPFilter Groups With Rules Array Defining Firewall RulesAdding Rules by Modifying ipfw.conf Parameter ipfilter Description Unmodified ipfw.conf file Example Adding Rules Using serveradminRule IPFilter Rules Array Firewall serveradmin Commands NAT Service NAT Service Settings Changing NAT Service SettingsParameter nat Description Viewing the NAT Service Log NAT serveradmin CommandsParameter natDescription Starting and Stopping VPN Service VPN ServiceChecking the Status of VPN Service Viewing VPN Service Settings Parameter vpnServers Description List of VPN Service Settings PPPAuthenticatorPlugins Arrayindex n Com.name.ppp.l2tp PPPDSACLEnabled Com.name.ppp.l2tpPPPLCPEchoEnabled Com.name.ppp.l2tp PPPVerboseLogging Com.name.ppp.l2tp PPPAuthenticatorPlugins Arrayindexn Com.name.ppp.pptp PPPDSACLEnabled Com.name.ppp.pptpPPPLCPEchoEnabled Com.name.ppp.pptp PPPCCPEnabled Com.name.ppp.pptp Viewing the VPN Service Log List of VPN serveradmin CommandsVPN Service Log on this Be restarted. See Determining Whether a Service Needs to be Requirements IP FailoverFailover Operation Hardware Enabling IP Failover To enable IP failover Notification Only Configuring IP FailoverPre and Post Scripts Enabling PPP Dial-In Page Testing Open Directory Plugins Testing Your Open Directory ConfigurationGeneral Directory Tools Modifying an Open Directory Node Changing Open Directory Service Settings Registering URLs With Service Location Protocol SLPParameter dirserv Description Standard Distribution Tools Configuring LdapProgram Used to Idle Timeout Delay RebindIdle Rebinding Options Additional Information About Ldap NetInfo Password Server Kerberosautoconfig KdcsetupKerberos and Single Sign On Tool in usr/sbin Description Checking Qtss Service Status Stopping Qtss Service Changing Qtss Settings Viewing Qtss SettingsTo list all Qtss service settings $ sudo serveradmin settings qtss Descriptions of Settings Qtss SettingsQtss parameters you might change Parameter qtss Description AdministratorGroup ModulesarrayidQTSSAdminModule ModulesarrayidQTSSAdminModuleAuthenticate ModulesarrayidQTSSAdminModule Enableremoteadmin ModulesarrayidQTSSAdminModule Enablebroadcastannounce ModulesarrayidQTSSReflectorModule Disableoverbuffering ModulesarrayidQTSSReflectorModuleEnablebroadcastpush ModulesarrayidQTSSReflectorModule Serverdefaultauthorizationrealm Listing Current Connections Qtss serveradmin Commands Viewing Qtss Service Statistics Forcing Qtss to Re-Read its Preferences Error.logTo force Qtss to re-read its preferences Library/QuickTimeStreaming/Logs Preparing Older Home Directories for User Streaming To set up /Sites/Streaming in older home directoriesCreated Page Index Kdcsetup utility 160 Kerberos Installer command 21 IP addressKerberosautoconfig tool 173 174 Used by ldapsearch 157 scripts 175