Trusted Extensions Configuration and Administration

Create an LDAP Client to Populate the LDAP Server

Because you use this client to populate your LDAP server, you perform this task before you populate the LDAP server.

You can create the client on the LDAP server temporarily and then remove it, or you can create an independent client.

Before You Begin

You are in the root role in the global zone.

1. Add Trusted Extensions software to a system.

   For instructions, see Adding the Trusted Extensions Feature to Oracle Solaris.

2. On the client, configure LDAP in the name-service/switch service.
   1. Display the current configuration.

      # svccfg -s name-service/switch listprop config
      config                       application
      config/value_authorization   astring       solaris.smf.value.name-service.switch
      config/default               astring       "files ldap"
      config/host                  astring       "files dns"
      config/netgroup              astring       ldap
      config/printer               astring       "user files ldap"

   2. Change the following property from the default:

      # svccfg -s name-service/switch setprop config/host = astring: "files ldap dns"

3. In the global zone, initialize the LDAP client.

Troubleshooting

For strategies to solve LDAP configuration problems, see Chapter 6, Troubleshooting LDAP Configurations in Working With Oracle Solaris 11.4 Directory and Naming Services: LDAP.