NOTE:

Run the setup-ds-admin.pl script as root.

The custom setup has the following steps:

CAUTION: If a Directory Server (notably Netscape Directory Server 6.21 or Red Hat Directory Server 7.1) is already installed on your machine, it is extremely important that you perform a migration, not a fresh installation. Migration is described in Chapter 6 “Migrating or upgrading to HP-UX Directory Server from Netscape or Red Hat Directory Server”.

1.Launch the setup-ds-admin.plscript:

# /opt/dirsrv/sbin/setup-ds-admin.pl

2.When asked to choose the setup type, enter 3 to perform a custom setup.

3.Set the computer name of the machine on which the Directory Server is being configured. This defaults to the fully-qualified domain name (FQDN) for the host. For example:

Computer name [ldap.example.com]:

NOTE:

The setup script gets the host information from the /etc/resolv.conf file. If the /etc/ hosts file includes aliases (such as ldap.example.com) that do not match the /etc/ resolv.conf settings, you cannot use the default host name option.

The host name is very important. It is used generate the Directory Server instance name, the admin domain, and the base suffix, among others. If you are using SSL/TLS or Kerberos, the computer name must be the exact name that clients use to connect to the system. If you will use DNS, make sure the name resolves to a valid IP address and that IP address resolves back to this name.

4.Set the user and group that the Directory Server process will run as. The default is www:other. For example:

System User [www]: System Group [other]:

HP recommends using the defaults. If you want to use a user or group other than the default, you must create the user or group before completing the setup script.

5.This step allows you to register your Directory Server with an existing Directory Server instance that serves as the Configuration Directory Server. This registers your new instance so it can be managed by the Console. If you are setting up the first Directory Server instance on your network, you cannot register it with another directory; you must set up your Directory Server as the Configuration Directory Server. To set up this Directory Server as a Configuration Directory Server, select n. The next installation steps (steps 6, 7, and 8) enable you to set up the administrator user.

To register the Directory Server instance with an existing Configuration Directory Server, select yes. This initiates the registration process in which you must supply the following information about the Configuration Directory Server. This information is supplied in place of setting up the administrator user for the new Directory Server (steps 6, 7, and 8).

•The Configuration Directory Server URL, such as ldap://ldap.example.com:389/o=NetscapeRoot

To use TLS/SSL, set the protocol as ldaps:// instead of ldap://

For LDAPS, use the secure port (636) instead of the standard port (389), and provide a CA certificate.

•The Configuration Directory Server administrator's user DN; by default, this is admin.

3.6 Setting up the Directory Server and Administration Server

27