Working With Oracle® Solaris 11.2 Directory and Naming Services: LDAP

Exit Print View

Updated: July 2014
 
 

Setting Up the NIS-to-LDAP Service

You can set up the N2L service either by using standard mappings or by using custom mappings, as described in the procedures in this section.

As part of the NIS-to -LDAP conversion, you need to run the inityp2l command. This command runs an interactive script for which you must provide configuration information. See the ypserv (1M) man page for explanations of the types of information you need to provide.

  • The name of the configuration file being created (default = /etc/default/ypserv)

  • The DN that stores configuration information in LDAP (default = ypserv)

  • Preferred server list for mapping data to/from LDAP

  • Authentication method for mapping data to/from LDAP

  • Transport Layer Security (TLS) method for mapping data to/from LDAP

  • Proxy user bind DN to read/write data from/to LDAP

  • Proxy user password to read/write data from/to LDAP

  • Timeout value (in seconds) for LDAP bind operation

  • Timeout value (in seconds) for LDAP search operation

  • Timeout value (in seconds) for LDAP modify operation

  • Timeout value (in seconds) for LDAP add operation

  • Timeout value (in seconds) for LDAP delete operation

  • Time limit (in seconds) for search operation on LDAP server

  • Size limit (in bytes) for search operation on LDAP server

  • Whether N2L should follow LDAP referrals

  • LDAP retrieval error action, number of retrieval attempts, and timeout (in seconds) between each attempt

  • Store error action, number of attempts, and timeout (in seconds) between each attempt

  • Mapping file name

  • Whether to generate mapping information for auto_direct map

    The script places relevant information regarding custom maps at appropriate places in the mapping file.

  • The naming context

  • Whether to enable password changes

  • Whether to change the default TTL values for any map


Note - sasl/cram-md5 authentication is not supported by most LDAP servers, including Oracle Directory Server Enterprise Edition.