ONC With Publickey LDAP Support Software Pack Release Notes

ONC with Publickey LDAP Support Software Pack

Installing and Conﬁguring Publickey with LDAP Support

Chapter 1 11

Installing and Conﬁguring Publickey with LDAP Support

This section summarizes the steps to install and conﬁgure publickey with LDAP support as

below. For detailed information on how to conﬁgure publickey with LDAP support, refer to the

“Conﬁgure LDAP-UX Client Services with Publickey Support” section in Chapter 2 of the

LDAP-UX Client Services B.04.00 Administrator’s Guide:

Step 1. Install Directory Server 6.11, 6.21, 7.0 or 7.1 for HP-UX on your server, if not

already installed. See “Netscape Directory Server/Red Hat Directory Server for

HP-UX” part of “Installation Requirements” on page 5 of this document for more

information.

Step 2. Install LDAP-UX Integration product version B.04.00 or later including the

migration scripts and administrator’s tools on your client systems, if not already

installed. See “LDAP-UX Integration product” part of “Installation Requirement”

on page 7of this document for details.

Step 3. Install the ONC EP/NCF Software Pack bundle, ENHKEY, on your client systems. See

“Installing the ONC EP/NCF Software Pack” on page 9 of this document for details.

Step 4. Skip this step if NIS+ credential table entries including public keys and secret keys

of users and hosts have been placed into Netscape Directory Server.

Otherwise, migrate your NIS+ credential table entries from the NIS+ server to

LDIF (LDAP Directory Interchange Format) ﬁles using the migration scripts and

import LDIF ﬁles into the LDAP directory server using the ldapmodify tool. The

migration scripts and the ldapmodify tool are delivered with LDAP-UX Integration

product version B.04.00 or later. For detailed information, refer to “Importing Your

NIS+ Data to Your LDAP Directory Server” section of the NIS+ to LDAP Migration

Guide available at the following web site:

http://docs.hp.com/hpux/internet

Click on the LDAP-UX Integration link.

Step 5. Conﬁgure the Name Service Switch (NSS) to enable publickey for LDAP support.

Save a copy of the /etc/nsswitch.conf ﬁle and modify the original to add an

entry for LDAP support to the publickey service as follows:

publickey: ldap [NOTFOUND=return] files

The following shows the contents of the sample ﬁle, /etc/nsswitch.ldap: