For Solaris ISP Server and Sun Internet Mail Server to interoperate, your network software configuration must meet the following requirements:
Sun Internet Mail Server and the Solaris ISP Server Directory Service must be installed on different machines. Refer to Sun Internet Mail Server 3.5 Advanced Installation Guide for instructions for installing Sun Internet Mail Server. Refer to Chapter 4, Installing Solaris ISP Server 2.0 Software for more information on installing the Sun Directory Services component of Solaris ISP Server.
The two machines must be able to reach one another over the network. The Sun Internet Mail Server directory will be configured as a slave of the Solaris ISP Server directory, and the master must be able to propagate data to the slave over the network.
The replication of data between the two directories is not secure. You should use SunScreen SKIP (included with Solaris ISP Server) to encrypt network communication between the two hosts. Some form of network encryption is required for the replication to be considered secure.
The Sun Internet Mail Server directory does not support the sunds
(or CRAM MD5) method of encrypting protected
data such as user passwords. One of the configuration steps performed by the integration tools is to convert the Solaris ISP Server directory to use the
weaker crypt
method for the encryption of protected data.
The Solaris ISP Server Directory Service must be version 2.0 (the 2.0 Host Configuration tool can be used to upgrade a Solaris for ISPs 1.0 installation).
The Sun Internet Mail Server directory should not be maintained by binding as the administrator DN. Changes made by the administrator will not be propagated to the master directory. The SIMS administration tool binds to the directory as the administrator, and so should not be used to create or modify entries.
The configuration tools included with Solaris ISP Server must be run on the Solaris ISP Server host and the Sun Internet Mail Server host. The order in which you run the configuration scripts is unimportant, so you may safely configure either directory at any time.