Creating a Checklist Based on Your Server Installation

During the server installation process, you will have defined crucial variables, with which you should create a checklist similar to the one below before launching idsconfig. You can use the blank checklist provided in Blank Checklists.

---

Note –

The information included below will serve as the basis for all examples that follow in the LDAP related chapters. The example domain is of an widget company, Example, Inc. with stores nationwide. The examples will deal with the West Coast Division, with the domain west.example.com

---

Table 15–1 Server Variables Defined

Variable	Definition for Example Network
Port number at which an instance of the directory server is installed (DEFAULT=389)	default
Name of server	myserver (from the FQDN ipdserver.west.example.com or 192.168.0.0)
Replica server(s) (IPnumber:port number)	192.168.0.1 [for ipdrep.west.example.com]
Directory manager [dn: cn=directory manager]	default
Domain name to be served	west.example.com
Maximum time (in seconds) to process client requests before timing out	—1
Maximum number of entries returned for each search request	—1

---

Note –

If you are using hostnames in defining defaultServerList or preferredServerList, you MUST ensure LDAP is not used for hosts lookup. This means ldap must not be in /etc/nsswitch.conf hosts line.

---

Table 15–2 Client Profile Variables Defined

Variable	Definition for Example Network
Profile name	WestUserProfile
Server list (defaults to the local subnet)	west.example.com or 192.168.0.0
Preferred server list (listed in order of which server to try first, second, and so on)	none
Search scope (number of levels down through the directory tree. 'One', the default, or 'Sub')	one (default)
Credential used to gain access to server. Default is anonymous	proxy
Follow Referrals? ( a pointer to another server if the main server is unavailable) Default is no.	Y
Search time limit (default is 30 seconds) for waiting for server to return information.	default
Bind time limit (default is 10 seconds) for contacting server. The default is seconds.	2
Authentication method Default is none.	simple

---

Note –

Client profiles are defined per domain. At least one profile must be defined for a given domain.

---

Attribute Indexes

idsconfig indexes the following list of attributes for improved performance.

membernisnetgroup

pres,eq,sub

nisnetgrouptriple

pres,eq,sub

memberuid

pres,eq

uidNumber

pres,eq

gidNumber

pres,eq

ipHostNumber

pres,eq

ipNetworkNumber

pres,eq

ipProtocolNumber

pres,eq

oncRpcNumber

pres,eq