LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Installing LDAP-UX Client Services
Downloading the Profile Periodically
Chapter 2 57
Downloading the Profile Periodically
The product setup program, /opt/ldapux/setup, allows you to define a
time interval after which the current profiles are being automatically
refreshed. The start time for this periodic refresh is defined by the time
the setup program was run and the value defined for ProfileTTL.
Therefore, it does not allow you to define a specific time of day when the
profiles should be downloaded (refreshed).
NOTE Starting with the B.03.00 release, if multiple domains are configured,
there will be a profile for each domain rather than just one profile for the
entire system.
For more detailed information, refer to the ldapclientd (1m) man page.
If you would like to manually control when you want to download the
profile, you can use the following steps:
1. When creating your profile entry using setup, set the ProfileTTL
value to 0.
2. Using the command get_profile_entry -s nss -D bindDN -w
password, write a shell script that downloads the profile. Below is an
example that downloads the profile from the directory. Modify this
example for your environment. It also compares the new and old
profiles and emails a status message:
#!/bin/ksh
cp /etc/opt/ldapux/ldapux_profile.ldif
/etc/opt/ldapux/ldapux_profile.sav
/opt/ldapux/config/get_profile_entry -s nss -D bindDN -w \
password 2>&1 /tmp/profile.upd$$
diff /etc/opt/ldapux/ldapux_profile.ldif
/etc/opt/ldapux/ldapux_profile.sav\
>> /tmp/profile.upd$$
if [ -s /tmp/profile.upd$$ ]; then
cat /tmp/profile.upd$$ | mailx -s "Profile cache
refreshed." root@sys01
else
echo "No changes." | mailx -s "Profile cache refreshed."
root@sys01