Solaris LDAP

Setting Up an LDAP Client

 

客户端的profile和proxy账户在Sun Java Directory Server setup的时候就已经建好了，默认的profile叫default，而默认的proxy账户是proxyagent。当LDAP的客户端被初始化后，客户端会从服务端上获取a copy of profile，在LDAP的客户端，ldap_cachemgr进程就是来负责管理和更新客户端profile的更新信息的。

 

The following example describes a typical client initialization:

# ldapclient init -a proxyPassword=proxy \
-a proxyDN=cn=proxyagent,ou=profile,dc=suned,dc=sun,dc=com\
-a domainname=suned.sun.com 192.168.0.100
System successfully configured

注意proxDN 

ldapclient命令会在/var/ldap目录下生成两个文件，但都是ASCII的文件，不容易阅读，常用ldapclient list来查看配置信息

NS_LDAP_SEARCH_SCOPE= sub  Tell the clients the scope of search a naming
service lookup should perform. Is it just searching one level under the DN (one), or the entire subtree under the DN (sub)?

在LDAP客户端的初始化过程中，/etc/nsswitch.ldap文件会自动覆盖/etc/nsswitch.conf文件。

To unconfigure an LDAP client, use the ldapclient command with the uninit option. This command removes the client files from the /var/ldap directory and restores the previous /etc/nsswitch.conf file. The ldap_cachemgr process is also stopped. The changes to the client name service configuration are dynamic; therefore, no reboot is needed.