Installing And Configuring LDAP-UX Client Services

Configure the LDAP-UX Client Services

 

Enter whether or not you want to create custom search descriptors for

 

any of the supported services: passwd, shadow passwd, group, PAM,

 

netgroup, rpc, protocols, network, hosts and services. Select the service

 

you want to create a custom search descriptor for.

 

A custom search descriptor consists of three parts: a search base DN,

 

scope, and filter. Use custom search descriptors if you want clients to

 

search different locations in the directory or to apply different search

 

filters, for example some clients might search for employees only in a

 

particular department. Each service can have up to three different

 

search descriptors. The client uses the search descriptors in order until it

 

finds what it is looking for.

 

 

NOTE

If your search filters overlap, enumeration requests will result in

 

duplicate entries being returned. For example, if one search filter

 

searched a subset of your organization and a second search filter

 

searched your entire organization, an enumeration request would return

 

duplicate entries.

 

See “Minimizing Enumeration Requests” on page 125 for more

 

information.

 

 

LDAP-UX Client Services uses the automount search filter for the automount service as default. If you want to create the nisObject search filter for the automount service to search a different location in the directory, use the following steps:

1.Type yes for the following question and press the return key:

Do you want to create custom search descriptors? [No]: yes

2.Next, it will take you to the screen which shows you the following information:

To accept the default shown in brackets, press the Return key.

search base [dc=cup,dc=hp,dc=com]: search scope (base, one, sub) [sub] Search filter [(objectclass=automount)]

40

Chapter 2

Page 54
Image 54
HP UX LDAP-UX Integration Software manual You want to create a custom search descriptor for