LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Installing LDAP-UX Client Services

Conﬁguring LDAP-UX Client Services

Chapter 2 41

NOTE When you conﬁgure the default search base for the GCS, you

must make sure that the base covers everything that you want to

include. For example, for a forest containing two domain trees

(ca.hp.com and ny.hp.com), if you specify ca.hp.com as the GCS

search base, all of the data under the ny.hp.com domain tree will

not be found. You must specify hp.com to cover the entire forest.

The setup tool provides the root domain as the default search

base. You must override it in order to cover the entire forest.

Read the instructions on each screen, carefully, as some of the

answers to these questions will be different than the last two

times you went through these questions.

When you have ﬁnished building the proﬁle for the GCS,

conﬁgure the proﬁles for each domain that is used by the global

catalog search.

To conﬁgure the proﬁles for each domain that is used by the

global catalog search, you will again return to step 3 through

step 21 of this procedure until you have conﬁgured each proﬁle

needed by the global catalog search.

When this process is complete, continue to the next step.

26. Reply to the question, Would you like to start/restart the

LDAP-UX daemon.

Starting with LDAP-UX Client Services B.03.20 or later, the product

daemon, /opt/ldapux/bin/ldapclientd, must be running for

LDAP-UX functions to work. With LDAP-UX Client Services B.03.10

or earlier, running the client daemon, ldapclientd, is optional. For

LDAP-UX Services B.03.10 or earlier, users need to start the

LDAP-UX daemon in order to use multiple domains and X.500

features.

Step 2: Install the PAM Kerberos Product

LDAP-UX Client Services with Active Directory uses the Kerberos

Authentication method. If not already available on your system, you will

need to install and conﬁgure PAM Kerberos. Some instructions for doing