LDAP-UX Client Services B.04.00 Administrator's Guide

Installing And Conﬁguring LDAP-UX Client Services

Conﬁgure the LDAP-UX Client Services

Chapter 234

For example: disable_uid_range=0-100,300-450,89

Note:

• White spaces between numbers are ignored.

• Only one line of the list is accepted, however, the line can be

wrapped.

• The maximum number of ranges is 20.

Step 22. “Verify the LDAP-UX Client Services” on page 68.

Step 23. Conﬁgure subsequent clients by running setup on those clients and

specifying an existing conﬁguration proﬁle. Or for a simpler process see

“Conﬁgure Subsequent Client Systems” on page 72.

Custom Conﬁguration

Running the Setup program for a quick conﬁguration, as described

above, conﬁgures your client using default values where possible. If you

would like to customize these parameters, proceed as follows.

If you want to use SSL, you must have the certiﬁcate database ﬁles,

cert7.db or cert8.db and key3.db, on your client system before you run the

custom conﬁguration. See “Conﬁgure the LDAP-UX Client Serivces with

SSL Support” on page 41 for details.

Step 1. Perform the steps described in “Quick Conﬁguration” on page 29.

However, after step 11, You will be asked whether you want to use SSL

or not. Enter “yes” to use SSL for the secure communication between

LDAP clients and the Netscape Directory Server. Enter “no” if you don’t

want to use SSL.

Step 2. Next, it will prompt you for selecting the authentication method for users

to bind/authenticate to the server.

You have a choice between SIMPLE (the default), or SASL DIGEST-MD5

if you choose to not enable SSL. However, you have a choice between

SIMPLE with SSL (the default), or SASL DIGEST-MD5 with SSL if you

choose to enable SSL.

If you select SASL DIGEST-MD5, two additional prompts will appear.

The ﬁrst will prompt you for a user mapping (UID, DN, or Other). The

second will prompt you for a single realm to use when retrieving user

authentication information. If no realm is speciﬁed, user information will

be retrieved from the ﬁrst realm the directory server offers.