LDAP-UX Client Services B.04.00 Administrator's Guide

Installing And Conﬁguring LDAP-UX Client Services

Conﬁgure LDAP-UX Client Services with Publickey Support

Chapter 252

After you enter the prompts for "Directory login:" and "password:",

ldapentry will bring up an editor window with the proﬁle entry. You can

add the serviceAuthenticationMethod attribute.

The value of the serviceAuthenticatioMethod entry depends on the

authentication method you conﬁgure. The following shows the possible

values of the serviceAuthenticationMethod attribute:

• For SASL DIGEST-MD5 using the Distinguish Name (DN) to

generate the DIGEST-MD5 hash, the data in the entry is:

serviceAuthenticationMethod:keyserv:sasl/digest-md5:\

username=dn

• For SASL DIGEST-MD5 using the UID attribute to generate the

DIGEST-MD5 hash, the data in the entry is:

serviceAuthenticationMethod:keyserv:sasl/digest-md5

• For SASL DIGEST-MD5 with SSL enabled using the DN to generate

the DIGEST-MD5 hash, the data in the entry is:

serviceAuthenticationMethod:keyserv:tls:sasl/digest-md5:

username=dn

• For SASL DIGEST-MD with SSL enabled using the UID attribute to

generate the DIGEST-MD5 hash, the data in the entry is:

serviceAuthenticationMethod:keyserv:tls:sasl/digest-md5

• For simple authentication, the data in the entry is:

serviceAuthenticationMethod:keyserv:simple

• For simple with SSL enabled, the data in the entry is:

serviceAuthenticationMethod:keyserv:tls:simple

For more information on ldapentry, refer to Chapter 5, “Command and

Tool Reference,” on page 137.

Step 3. Go to /opt/ldapux/config:

cd /opt/ldapux/config

Step 4. Use /opt/ldapux/config/get_profile_entry to download the

modiﬁed LDIF proﬁle: