JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP)     Oracle Solaris 11 Express 11/10
search filter icon
search icon

Document Information

Preface

Part I About Naming and Directory Services

1.  Naming and Directory Services (Overview)

2.  The Name Service Switch (Overview)

Part II DNS Setup and Administration

3.  DNS Setup and Administration (Reference)

Part III NIS Setup and Administration

4.  Network Information Service (NIS) (Overview)

5.  Setting Up and Configuring NIS Service

6.  Administering NIS (Tasks)

7.  NIS Troubleshooting

Part IV LDAP Naming Services Setup and Administration

8.  Introduction to LDAP Naming Services (Overview/Reference)

9.  LDAP Basic Components and Concepts (Overview)

10.  Planning Requirements for LDAP Naming Services (Tasks)

11.  Setting Up Sun Java System Directory Server With LDAP Clients (Tasks)

12.  Setting Up LDAP Clients (Tasks)

13.  LDAP Troubleshooting (Reference)

14.  LDAP General Reference (Reference)

Blank Checklists

LDAP Commands

General LDAP Tools

LDAP Tools Requiring LDAP Naming Services

Example pam.conf File for pam_ldap

Example pam_conf file for pam_ldap Configured for Account Management

IETF Schemas for LDAP

RFC 2307 Network Information Service Schema

Mail Alias Schema

Directory User Agent Profile (DUAProfile) Schema

Oracle Solaris Schemas

Projects Schema

Role-Based Access Control and Execution Profile Schema

Internet Print Protocol Information for LDAP

Internet Print Protocol (IPP) Attributes

Internet Print Protocol (IPP) ObjectClasses

Printer Attributes

Sun Printer ObjectClasses

Generic Directory Server Requirements for LDAP

Default Filters Used by LDAP Naming Services

15.  Transitioning From NIS to LDAP (Overview/Tasks)

Part V Active Directory Naming Service

16.  Setting Up Oracle Solaris Active Directory Clients

Glossary

Index

Default Filters Used by LDAP Naming Services

If you do not manually specify a parameter for a given service using an SSD, the default filter is used. To list the default filters for a given service, use ldaplist with the -v option.

In the following example, filter=(&(objectclass=iphost)(cn=abcde)defines the default filters.

database=hosts
filter=(&(objectclass=iphost)(cn=abcde)
user data=(&(%s) (cn=abcde))

ldaplist generates the following list of default filters, where %s signifies a string and %d, a number.

hosts
(&(objectclass=iphost)(cn=%s))
--------------
passwd
(&(objectclass=posixaccount)(uid=%s))
--------------
services
(&(objectclass=ipservice)(cn=%s))
--------------
group
(&(objectclass=posixgroup)(cn=%s))
--------------
netgroup
(&(objectclass=nisnetgroup)(cn=%s))
--------------
networks
(&(objectclass=ipnetwork)(ipnetworknumber=%s))
--------------
netmasks
(&(objectclass=ipnetwork)(ipnetworknumber=%s))
--------------
rpc
(&(objectclass=oncrpc)(cn=%s))
--------------
protocols
(&(objectclass=ipprotocol)(cn=%s))
--------------
bootparams
(&(objectclass=bootableDevice)(cn=%s))
--------------
ethers
(&(objectclass=ieee802Device)(cn=%s))
--------------
publickey
(&(objectclass=niskeyobject)(cn=%s))
or
(&(objectclass=niskeyobject)(uidnumber=%d))
--------------
aliases
(&(objectclass=mailGroup)(cn=%s))
--------------

Table 14-4 LDAP Filters Used in getXbyY Calls

Filter
Definition
bootparamByName
(&(objectClass=bootableDevice)(cn=%s))
etherByHost
(&(objectClass=ieee802Device)(cn=%s))
etherByEther
(&(objectClass=ieee802Device)(macAddress=%s))
groupByName
(&(objectClass=posixGroup)(cn=%s))
groupByGID
(&(objectClass=posixGroup)(gidNumber=%ld))
groupByMember
(&(objectClass=posixGroup)(memberUid=%s))
hostsByName
(&(objectClass=ipHost)(cn=%s))
hostsByAddr
(&(objectClass=ipHost)(ipHostNumber=%s))
keyByUID
(&(objectClass=nisKeyObject)(uidNumber=%s))
keyByHost
(&(objectClass=nisKeyObject)(cn=%s))
netByName
(&(objectClass=ipNetwork)(cn=%s))
netByAddr
(&(objectClass=ipNetwork)(ipNetworkNumber=%s))
nisgroupMember
(membernisnetgroup=%s)
maskByNet
(&(objectClass=ipNetwork)(ipNetworkNumber=%s))
printerByName
(& (objectClass=sunPrinter)(|(printer-name=%s)(printer-aliases=%s)))
projectByName
(&(objectClass=SolarisProject)(SolarisProjectName=%s))
projectByID
(&(objectClass=SolarisProject)(SolarisProjectID=%ld))
protoByName
(&(objectClass=ipProtocol)(cn=%s))
protoByNumber
(&(objectClass=ipProtocol)(ipProtocolNumber=%d))
passwordByName
(&(objectClass=posixAccount)(uid=%s))
passwordByNumber
(&(objectClass=posixAccount)(uidNumber=%ld))
rpcByName
(&(objectClass=oncRpc)(cn=%s))
rpcByNumber
(&(objectClass=oncRpc)(oncRpcNumber=%d))
serverByName
(&(objectClass=ipService)(cn=%s))
serverByPort
(&(objectClass=ipService)(ipServicePort=%ld))
serverByNameAndProto
(&(objectClass=ipService)(cn=%s)(ipServiceProtocol=%s))
specialByNameserver
(ipServiceProtocol=%s))
ByPortAndProto
(&(objectClass=shadowAccount)(uid=%s))
netgroupByTriple
(&(objectClass=nisNetGroup)(cn=%s))
netgroupByMember
(&(objectClass=nisNetGroup)(cn=%s))
authName
(&(objectClass=SolarisAuthAttr)(cn=%s))
auditUserByName
(&(objectClass=SolarisAuditUser)(uid=%s))
execByName
(&(objectClass=SolarisExecAttr)(cn=%s) (SolarisKernelSecurityPolicy=%s)(SolarisProfileType=%s))
execByPolicy
(&(objectClass=SolarisExecAttr)(SolarisProfileId=%s) (SolarisKernelSecurityPolicy=%s)(SolarisProfileType=%s))
profileByName
(&(objectClass=SolarisProfAttr)(cn=%s))
userByName
(&(objectClass=SolarisUserAttr)(uid=%s))

The following table lists the getent attribute filters.

Table 14-5 getent Attribute Filters

Filter
Definition
aliases
(objectClass=rfc822MailGroup)
auth_attr
(objectClass=SolarisAuthAttr)
audit_user
(objectClass=SolarisAuditUser)
exec_attr
(objectClass=SolarisExecAttr)
group
(objectClass=posixGroup)
hosts
(objectClass=ipHost)
networks
(objectClass=ipNetwork)
prof_attr
(objectClass=SolarisProfAttr)
protocols
(objectClass=ipProtocol)
passwd
(objectClass=posixAccount)
printers
(objectClass=sunPrinter)
rpc
(objectClass=oncRpc)
services
(objectClass=ipService)
shadow
(objectclass=shadowAccount)
project
(objectClass=SolarisProject)
usr_attr
(objectClass=SolarisUserAttr)