HP-UX AAA Server A.08.01 administrator's guide (T1428-90072, May 2010)

Table 8-3 Values for Configuring Realms for LDAP (continued)
DescriptionValue
Name of the host on which the LDAP directory server runs. The
value must be a fully qualified DNS name, although an IP address
Host
also works. Both traditional IP (IPv4) and IPv6 address formats are
supported. The HP-UX AAA Server can resolve DNS name format
entries to IPv4 and IPv6 addresses.
Enter an IPv4 address in dotted-quad notation. Enter an IPv6 address
in IPv6 Literal format notation. For example:
IPv4 address — 192.0.2.0
IPv6 address — fedc:ba98:7654:3210
Port number on which the directory server is running. Default value
is 389.
Port (Optional)
Enables or disables SSL connections between the HP-UX AAA Server
and the LDAP directory. If you are enabling SSL, you must specify
Use SSL
the server's CA certificate path or fully qualified file name in the
Server Properties -> ProLDAP Properties window.
Special user ID used when an authenticated search is allowed on
the LDAP directory server. This administrator does not need to be
Administrator
a real administrator of the LDAP directory server, but must have
read access to all the users (and their passwords). Intended to be
authenticated by the AAA server.
Password for Administrator to bind (authenticate) itself to the LDAP
directory server.
Password
Pointer into the directory where the search for users in a realm starts.
Specifying a search base improves server performance by limiting
Search Base
the scope of search operations on user information for a particular
realm. A search base contains a list of A-V pairs that trace a path
from a location in the directory's schema to the top of the directory.
For example, a search base of o=hp, c=US represents a search for
one of the users on the following tree:
c=US
____________|_______
|
o=hp
____________|____________________
| | | |
uid=Joe uid=Bob uid=Dawn uid=Maria
The A-V pairs used depend on the schema of your particular
directory server.
NOTE: It is more efficient to start your search lower in the directory
structure rather than higher. HP recommends that you eliminate
spaces between Search Base components (i.e., instead of
ou=abc,o=cde, c=us, use ou=abc,o=cde,c=us).
114 Configuring Realms