LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Active Directory Multiple Domains

Retrieving Data from a Remote Domain

Chapter 362

Retrieving Data from a Remote Domain

LDAP-UX can retrieve data from a remote domain using three methods:

• Remote Domain Conﬁguration

This method allows you to conﬁgure a sequence in which LDAP-UX

searched remote domains. If you know in which domains your data

resides, you can use setup to conﬁgure a remote domain sequence.

When LDAP-UX does not ﬁnd data in the local domain, all remote

domains are searched in the speciﬁed order until the data is found.

• GCS

This method allows you to conﬁgure LDAP-UX to search the GCS

ﬁrst. If you are not sure in which domains the data resides, you can

conﬁgure LDAP-UX to search the GCS ﬁrst to determine in which

domain the requested data resides, then connect to that speciﬁc

domain controller to retrieve complete POSIX information. However,

by default, the global catalog does not contain any POSIX attributes.

You should add some POSIX attributes into the global catalog. For

information, refer to “Adding POSIX Attributes to the Global

Catalog” on page 70.

You also need a conﬁguration proﬁle that speciﬁes which server (and

port) serves as the GCS. The GCS proﬁle is stored locally in

/etc/opt/ldapux/domain_profiles/ldapux_profile.bin.gc.

• Both Remote Domain Conﬁguration and GCS

If you are sure that you need some speciﬁc remote domains, but don’t

want to exclude other domains, you can conﬁgure both, specifying

remote domains and conﬁguring usage of the GCS. When both are

conﬁgured, LDAP-UX searches in this sequence:

1. local domain

2. remote domains in the order of conﬁguration

3. GCS to determine in which domain the data resides

4. speciﬁc domain determined by GCS