Go to main content

Working With Oracle® Solaris 11.3 Directory and Naming Services: LDAP

Exit Print View

Updated: September 2018
 
 

Directory Server Requirements

To configure the directory server for the LDAP naming service, you need to provide server information and client profile information.

To support LDAP clients, all servers must support the LDAP v3 protocol and compound naming and auxiliary object classes. In addition, servers must support at least one of the following controls:

  • Simple paged-mode (RFC 2696)

  • Virtual List View controls

    The server must support at least one of the following authentication methods:

    • anonymous

    • simple

    • sasl/cram-MD5

    • sasl/digest-MD5

    • sasl/GSSAPI

If an LDAP client is using the pam_unix_* modules, the server must support storing passwords in UNIX crypt format.

If an LDAP client is using TLS, the server must support SSL or TLS.

If an LDAP client is using sasl/GSSAPI, the server must support SASL, GSSAPI, Kerberos 5 authentication. Support for GSS encryption over the wire is optional.

Server Information for Configuring the Directory Server

When you configure the directory server, you are prompted for the following information about the server:

  • Port number for the directory server instance. By default, the port number is 389.

  • Server name.

  • IP addresses and port numbers of replica servers.

  • Directory manager represented by the cn variable. By default, cn is set to directory manager.

  • Domain name of the domain server.

  • Maximum length of time in seconds to process client requests before the request times out.

  • Maximum number of record information that is provided for each search request.

Some of the information about the server are attributes are similar to the LDAP client profile. For more information, see Planning the Configuration of the LDAP Client Profile.

To prepare the server information, see Checklists for Configuring LDAP.

LDAP Client Profile Information

You need to know the LDAP client profile attributes to regulate client access to the server when requesting information. For information about LDAP client profile attributes, see Planning the Configuration of the LDAP Client Profile.


Note -  Client profiles are defined per domain. You must define at least one profile for a given domain.

Creating Browsing Indexes for the Directory Tree

The browsing index functionality of ODSEE is called virtual list view (VLV). With VLV, a client can view a select subset of entries from lengthy list, which reduces the search time for every client.

The creation of the directory information tree includes the creation of VLVs for the tree. Use the online instructions to create the VLVs on the directory server as described in How to Configure Oracle Directory Server Enterprise Edition for the LDAP Naming Service.