JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP)
search filter icon
search icon

Document Information

Preface

Part I About Naming and Directory Services

1.  Naming and Directory Services (Overview)

2.  The Name Service Switch (Overview)

Part II DNS Setup and Administration

3.  DNS Setup and Administration (Reference)

Part III NIS Setup and Administration

4.  Network Information Service (NIS) (Overview)

5.  Setting Up and Configuring NIS Service

6.  Administering NIS (Tasks)

7.  NIS Troubleshooting

Part IV LDAP Naming Services Setup and Administration

8.  Introduction to LDAP Naming Services (Overview/Reference)

9.  LDAP Basic Components and Concepts (Overview)

10.  Planning Requirements for LDAP Naming Services (Tasks)

11.  Setting Up Sun Java System Directory Server With LDAP Clients (Tasks)

12.  Setting Up LDAP Clients (Tasks)

13.  LDAP Troubleshooting (Reference)

14.  LDAP General Reference (Reference)

Blank Checklists

LDAP Upgrade Information

Compatibility

Running the ldap_cachemgr Daemon

New automount Schema

pam_ldap Changes

LDAP Commands

General LDAP Tools

LDAP Tools Requiring LDAP Naming Services

Example pam.conf File for pam_ldap

Example pam_conf file for pam_ldap Configured for Account Management

IETF Schemas for LDAP

RFC 2307 Network Information Service Schema

Mail Alias Schema

Directory User Agent Profile (DUAProfile) Schema

Solaris Schemas

Solaris Projects Schema

Role-Based Access Control and Execution Profile Schema

Internet Print Protocol Information for LDAP

Internet Print Protocol (IPP) Attributes

Internet Print Protocol (IPP) ObjectClasses

Sun Printer Attributes

Sun Printer ObjectClasses

Generic Directory Server Requirements for LDAP

Default Filters Used by LDAP Naming Services

15.  Transitioning From NIS to LDAP (Overview/Tasks)

16.  Transitioning From NIS+ to LDAP

A.  Solaris 10 Software Updates to DNS, NIS, and LDAP

Service Management Facility Changes

DNS BIND

pam_ldap Changes

Documentation Errors

Glossary

Index

Default Filters Used by LDAP Naming Services

If you do not manually specify a parameter for a given service using an SSD, the default filter is used. To list the default filters for a given service, use ldaplist with the -v option.

In the following example, filter=(&(objectclass=iphost)(cn=abcde)defines the default filters.

database=hosts
filter=(&(objectclass=iphost)(cn=abcde)
user data=(&(%s) (cn=abcde))

ldaplist generates the following list of default filters, where %s signifies a string and %d, a number.

hosts
(&(objectclass=iphost)(cn=%s))
--------------
passwd
(&(objectclass=posixaccount)(uid=%s))
--------------
services
(&(objectclass=ipservice)(cn=%s))
--------------
group
(&(objectclass=posixgroup)(cn=%s))
--------------
netgroup
(&(objectclass=nisnetgroup)(cn=%s))
--------------
networks
(&(objectclass=ipnetwork)(ipnetworknumber=%s))
--------------
netmasks
(&(objectclass=ipnetwork)(ipnetworknumber=%s))
--------------
rpc
(&(objectclass=oncrpc)(cn=%s))
--------------
protocols
(&(objectclass=ipprotocol)(cn=%s))
--------------
bootparams
(&(objectclass=bootableDevice)(cn=%s))
--------------
ethers
(&(objectclass=ieee802Device)(cn=%s))
--------------
publickey
(&(objectclass=niskeyobject)(cn=%s))
or
(&(objectclass=niskeyobject)(uidnumber=%d))
--------------
aliases
(&(objectclass=mailGroup)(cn=%s))
--------------

Table 14-4 LDAP Filters Used in getXbyY Calls

Filter
Definition
bootparamByName
(&(objectClass=bootableDevice)(cn=%s))
etherByHost
(&(objectClass=ieee802Device)(cn=%s))
etherByEther
(&(objectClass=ieee802Device)(macAddress=%s))
groupByName
(&(objectClass=posixGroup)(cn=%s))
groupByGID
(&(objectClass=posixGroup)(gidNumber=%ld))
groupByMember
(&(objectClass=posixGroup)(memberUid=%s))
hostsByName
(&(objectClass=ipHost)(cn=%s))
hostsByAddr
(&(objectClass=ipHost)(ipHostNumber=%s))
keyByUID
(&(objectClass=nisKeyObject)(uidNumber=%s))
keyByHost
(&(objectClass=nisKeyObject)(cn=%s))
netByName
(&(objectClass=ipNetwork)(cn=%s))
netByAddr
(&(objectClass=ipNetwork)(ipNetworkNumber=%s))
nisgroupMember
(membernisnetgroup=%s)
maskByNet
(&(objectClass=ipNetwork)(ipNetworkNumber=%s))
printerByName
(& (objectClass=sunPrinter)(|(printer-name=%s)(printer-aliases=%s)))
projectByName
(&(objectClass=SolarisProject)(SolarisProjectName=%s))
projectByID
(&(objectClass=SolarisProject)(SolarisProjectID=%ld))
protoByName
(&(objectClass=ipProtocol)(cn=%s))
protoByNumber
(&(objectClass=ipProtocol)(ipProtocolNumber=%d))
passwordByName
(&(objectClass=posixAccount)(uid=%s))
passwordByNumber
(&(objectClass=posixAccount)(uidNumber=%ld))
rpcByName
(&(objectClass=oncRpc)(cn=%s))
rpcByNumber
(&(objectClass=oncRpc)(oncRpcNumber=%d))
serverByName
(&(objectClass=ipService)(cn=%s))
serverByPort
(&(objectClass=ipService)(ipServicePort=%ld))
serverByNameAndProto
(&(objectClass=ipService)(cn=%s)(ipServiceProtocol=%s))
specialByNameserver
(ipServiceProtocol=%s))
ByPortAndProto
(&(objectClass=shadowAccount)(uid=%s))
netgroupByTriple
(&(objectClass=nisNetGroup)(cn=%s))
netgroupByMember
(&(objectClass=nisNetGroup)(cn=%s))
authName
(&(objectClass=SolarisAuthAttr)(cn=%s))
auditUserByName
(&(objectClass=SolarisAuditUser)(uid=%s))
execByName
(&(objectClass=SolarisExecAttr)(cn=%s) (SolarisKernelSecurityPolicy=%s)(SolarisProfileType=%s))
execByPolicy
(&(objectClass=SolarisExecAttr)(SolarisProfileId=%s) (SolarisKernelSecurityPolicy=%s)(SolarisProfileType=%s))
profileByName
(&(objectClass=SolarisProfAttr)(cn=%s))
userByName
(&(objectClass=SolarisUserAttr)(uid=%s))

The following table lists the getent attribute filters.

Table 14-5 getent Attribute Filters

Filter
Definition
aliases
(objectClass=rfc822MailGroup)
auth_attr
(objectClass=SolarisAuthAttr)
audit_user
(objectClass=SolarisAuditUser)
exec_attr
(objectClass=SolarisExecAttr)
group
(objectClass=posixGroup)
hosts
(objectClass=ipHost)
networks
(objectClass=ipNetwork)
prof_attr
(objectClass=SolarisProfAttr)
protocols
(objectClass=ipProtocol)
passwd
(objectClass=posixAccount)
printers
(objectClass=sunPrinter)
rpc
(objectClass=oncRpc)
services
(objectClass=ipService)
shadow
(objectclass=shadowAccount)
project
(objectClass=SolarisProject)
usr_attr
(objectClass=SolarisUserAttr)