Solaris and LDAP naming services : deploying LDAP in the Enterprise

System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP)......Page 1
How This Book Is Organized......Page 15
How the System Administration Volumes Are Organized......Page 16
Typographic Conventions......Page 17
Shell Prompts in Command Examples......Page 18
About Naming and Directory Services......Page 19
What Is a Naming Service?......Page 21
Description of the DNS Naming Service......Page 27
Description of the NIS+ Naming Service......Page 28
Naming Services: A Quick Comparison......Page 29
About the Name Service Switch......Page 31
Format of the nsswitch.conf File......Page 32
Switch Status Messages......Page 33
Default Search Criteria......Page 34
Timezone and the Switch File......Page 35
The nsswitch.conf Template Files......Page 36
The Default Switch Template Files......Page 37
The nsswitch.conf File......Page 40
How to Modify the Name Service Switch......Page 41
IPv6 and Solaris Naming Services......Page 42
Ensuring Compatibility With +/- Syntax......Page 43
The Switch File and Password Information......Page 44
DNS Setup and Administration......Page 45
Related Materials......Page 47
Migrating From BIND 8 to BIND 9......Page 48
DNS and the Service Management Facility......Page 49
The rndc.conf Configuration File......Page 50
Commands of BIND 9 rndc......Page 51
BIND 9 Tools and Configuration Files......Page 52
Descriptions of Command and Option Changes......Page 53
The named.conf Options......Page 54
The ACL Statement......Page 57
Summary of the named.conf Options......Page 58
NIS Setup and Administration......Page 65
NIS Introduction......Page 67
NIS Architecture......Page 68
NIS Clients......Page 69
NIS Daemons......Page 70
NIS Maps......Page 71
Default NIS Maps......Page 72
Using NIS Maps......Page 74
NIS-Related Commands......Page 75
Server-List Mode......Page 77
Broadcast Mode......Page 78
Configuring NIS — Task Map......Page 79
NIS and the Service Management Facility......Page 80
Planning Your NIS Domain......Page 81
Source Files Directory......Page 82
Preparing Source Files for Conversion to NIS Maps......Page 83
Setting Up the Master Server With ypinit......Page 85
Starting and Stopping NIS Service on the Master Server......Page 87
Starting and Stopping NIS From the Command Line......Page 88
Setting Up a Slave Server......Page 89
Setting Up NIS Clients......Page 91
Password Files and Namespace Security......Page 93
How to Add a New NIS User to an NIS Domain......Page 94
Setting User Passwords......Page 95
NIS Netgroups......Page 96
Working With NIS Maps......Page 97
Changing a Map's Master Server......Page 98
Modifying Configuration Files......Page 99
Working With the Makefile......Page 100
Changing Makefile Macros/Variables......Page 101
Modifying Makefile Entries......Page 102
Updating and Modifying Existing Maps......Page 103
Using cron for Map Transfers......Page 104
Using Shell Scripts With cron and ypxfr......Page 105
Modifying Default Maps......Page 106
Creating Maps From Standard Input......Page 107
Adding a Slave Server......Page 108
Changing a Machine's NIS Domain......Page 110
Using NIS in Conjunction With DNS......Page 111
Turning Off NIS Services......Page 112
Symptoms......Page 113
Missing or Incorrect Domain Name......Page 114
No Server Available......Page 115
When Server Binding is Not Possible......Page 116
NIS Problems Affecting Many Clients......Page 117
NIS Daemons Not Running......Page 118
Logging ypxfr Output......Page 119
ypserv Crashes......Page 120
LDAP Naming Services Setup and Administration......Page 123
Audience Assumptions......Page 125
LDAP Naming Services Compared to Other Naming Services......Page 126
Restrictions of LDAP Naming Services......Page 127
LDAP Naming Services Setup (Task Map)......Page 128
LDAP Data Interchange Format (LDIF)......Page 129
Using Fully Qualified Domain Names With LDAP......Page 132
Default Directory Information Tree (DIT)......Page 133
Description of SSDs......Page 134
objectClass Map......Page 136
Client Profile Attributes......Page 137
Local Client Attributes......Page 139
ldap_cachemgr Daemon......Page 140
Introduction......Page 141
Assigning Client Credential Levels......Page 142
Choosing Authentication Methods......Page 144
Authentication and Services......Page 146
pam_unix......Page 147
pam_ldap......Page 148
PAM and Changing Passwords......Page 149
Account Management......Page 150
LDAP Planning Overview......Page 153
Planning the Directory Information Tree (DIT)......Page 154
Data Sharing With Other Applications......Page 155
LDAP and Replica Servers......Page 156
Planning the LDAP Security Model......Page 157
Planning the LDAP Data Population......Page 158
Setting Up Sun Java System Directory Server With LDAP Clients (Tasks)......Page 161
Creating a Checklist Based on Your Server Installation......Page 162
Attribute Indexes......Page 163
Using Browsing Indexes......Page 164
Setting Up SSDs Using idsconfig......Page 165
Running idsconfig......Page 166
Example idsconfig Setup......Page 167
Populating the Directory Server Using ldapaddent......Page 171
Using lpget......Page 172
Populating the Directory Server With Additional Profiles......Page 173
Configuring the Directory Server to Enable Account Management......Page 174
Migrating Your Sun Java System Directory Server......Page 175
Prerequisites to LDAP Client Setup......Page 177
LDAP and the Service Management Facility......Page 178
Initializing an LDAP Client......Page 179
Using Proxy Credentials......Page 180
Modifying a Manual Client Configuration......Page 181
Uninitializing a Client......Page 182
Setting Up TLS Security......Page 183
Configuring PAM to Use LDAP server_policy......Page 184
Listing All LDAP Containers......Page 185
Modifying the nsswitch.conf File for LDAP......Page 186
Enabling DNS With LDAP......Page 187
Monitoring LDAP Client Status......Page 189
Verifying ldap_cachemgr Is Running......Page 190
Checking Server Data From a Non-Client Machine......Page 191
Login Does Not Work......Page 192
ldapclient Cannot Bind to Server......Page 193
ldapclient Hangs During Setup......Page 194
Blank Checklists......Page 195
LDAP Upgrade Information......Page 196
New automount Schema......Page 197
LDAP Commands......Page 198
Example pam.conf File for pam_ldap......Page 199
Example pam_conf file for pam_ldap Configured for Account Management......Page 201
RFC 2307 Network Information Service Schema......Page 203
Mail Alias Schema......Page 208
Directory User Agent Profile (DUAProfile) Schema......Page 209
Role-Based Access Control and Execution Profile Schema......Page 211
Internet Print Protocol (IPP) Attributes......Page 213
Internet Print Protocol (IPP) ObjectClasses......Page 219
Sun Printer Attributes......Page 220
Generic Directory Server Requirements for LDAP......Page 221
Default Filters Used by LDAP Naming Services......Page 222
NIS-to-LDAP Service Overview......Page 227
NIS-to-LDAP Audience Assumptions......Page 228
Effects of the NIS-to-LDAP Service on Users......Page 229
NIS-to-LDAP Transition Terminology......Page 230
NIS-to-LDAP Commands, Files, and Maps......Page 231
Supported Standard Mappings......Page 232
Transitioning From NIS to LDAP (Task Map)......Page 233
Setting Up the NIS-to-LDAP Service......Page 234
Example 1–Moving Host Entries......Page 239
Example 2–Implementing a Custom Map......Page 240
Creating Virtual List View Indexes With Sun Java System Directory Server......Page 241
Avoiding Server Timeouts With Sun Java System Directory Server......Page 242
Avoiding Buffer Overruns With Sun Java System Directory Server......Page 243
Common LDAP Error Messages......Page 244
Debugging the NISLDAPmapping File......Page 245
N2L Deadlock Issue......Page 247
Reverting to NIS......Page 248
NIS+ to LDAP Overview......Page 251
rpc.nisd Configuration Files......Page 252
NIS+ to LDAP Tools and the Service Management Facility......Page 253
Modifying the /lib/svc/method/nisplus File......Page 254
Creating Attributes and Object Classes......Page 255
Configuration Data From LDAP......Page 256
Default Location in LDAP and NIS+......Page 257
Error Actions......Page 258
nisplusLDAPdatabaseIdMapping Attribute......Page 259
nisplusLDAPentryTtl Attribute......Page 260
nisplusLDAPobjectDN Attribute......Page 261
nisplusLDAPcolumnFromAttribute Attribute......Page 262
NIS+ to LDAP Migration Scenarios......Page 264
Merging NIS+ and LDAP Data......Page 265
Replication Timestamps......Page 268
The Directory Server (NIS+ to LDAP)......Page 269
Security and Authentication......Page 270
Performance and Indexing......Page 272
Mapping NIS+ Objects Other Than Table Entries......Page 273
NIS+ Entry Owner, Group, Access, and TTL......Page 275
Principal Names and Netnames (NIS+ to LDAP)......Page 278
client_info Attributes and Object Class......Page 280
timezone Attributes and Object Class......Page 281
Adding New Object Mappings (NIS+ to LDAP)......Page 282
Adding Entry Objects......Page 284
Storing Configuration Information in LDAP......Page 288
Service Management Facility Changes......Page 293
pam_ldap Changes......Page 294
Documentation Errors......Page 295
Glossary......Page 297
Index......Page 305