LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Installing LDAP-UX Client Services

Conﬁguring LDAP-UX Client Services

Chapter 238

21. Enter the Profile Time To Live (TTL) value. This value deﬁnes

the time interval between automatic downloads (refreshes) of new

conﬁguration proﬁles from the directory. Automatic refreshing

ensures that the client is always conﬁgured using the newest

conﬁguration proﬁle. If you want to disable automatic refresh or

manually control when the refresh occurs, enter a value of 0. Refer to

“Downloading the Proﬁle Periodically” on page 57

22. Enter whether or not you want to remap the standard object class

attributes to alternate attributes. You need to do this if your user and

group data do not conform to the object classes deﬁned in RFC 2307,

PosixAccount, PosixGroup, and ShadowAccount.

You can remap the attributes for any of the supported services:

passwd, shadow passwd, group, PAM, netgroup, rpc, protocols,

networks, hosts, and services. Select the service you want to

remap. Then select the attribute you want to remap and enter the

new attribute name. For example, you might map the standard

UNIX user ID number attribute uidnumber to an employeeID

attribute.

NOTE Make sure that the attribute names are entered correctly to avoid

unpredictable results later.

Refer to RFC 2307 at http://www.ietf.org/rfc/rfc2307.txt for a

description of the standard object classes and attributes.

Optionally, you may set up X.500 by executing the following steps:

a. Map to memberuid member.

b. For the question:

Specify the service you want to map? [0]: 3, enter 3.

c. For the question:

Specify the attribute you want to map? [0]: 3, enter 3.

d. Enter the attributes you want to map to the member attribute:

[memberuid]: member

NOTE LDAP-UX supports DN-based (X.500 style) membership syntax.

This means that you do not need to use the memberUid

attributes to deﬁne the members of a POSIX group. Instead, you