Defining LDAP Local Client Attributes

Language:

You can define the attributes of the LDAP client profile to configure the LDAP server. For more information about the LDAP client profile attributes, see Planning Requirements for LDAP Naming Services. You use the idsconfig command to set up the client profile attributes on the server.

Use the ldapclient command to set up the following local client attributes:

adminDN – Specifies the administrator entry's distinguished name for the admin credential. If the value of the enableShadowUpdate switch is true on the client system and credentialLevel has a value other than self, then you must specify the adminDN attribute.
adminPassword – Specifies the administrator entry's password for the admin credential. If the value of the enableShadowUpdate switch is true on the client system and credentialLevel has a value other than self, then you must define the adminPassword attribute.
domainName – Specifies the client's domain name, which becomes the default domain for the client system. You must specify the value of the attribute as it has no default value.
proxyDN – Specifies the proxy's distinguished name. If the client system is configured with credentialLevel set to proxy, you must specify the proxyDN.
proxyPassword – Specifies the proxy's password. If the client system is configured with credentialLevel set to proxy, you must define the proxyPassword.
certificatePath – Specifies the directory on the local file system containing the certificate databases. You must use this attribute if a client system is configured with authenticationMethod or serviceAuthenticationMethod using TLS. The default value is /var/ldap.

Note - If the BaseDN in an SSD contains a trailing comma, it is used as a relative value of the defaultSearchBase. The values of the defaultSearchBase are appended to the BaseDN before a search is performed.