LDAP-UX Client Services B.04.10 with Microsoft Windows Active Directory Server Administrator's Guide

NOTE: The userPassword attribute is mapped to *NULL*
to prevent passwords from being returned for increased
security and to prevent PAM_UNIX from authenticating
users in the LDAP directory. Mapping to *NULL* or any
other nonexistent attribute means do not return anything.
authenticationMethod
is how the client binds to the directory. The value can be
simple indicating bind using a user name and password.
If this attribute has no value, simple is the default.
bindTimeLimit
is how long, in seconds, the client should wait to bind before
aborting. 0 (zero) means no time limit. If this attribute has
no value, the default is no time limit.
credentialLevel
is the identity clients use when binding to the directory. The
value must be one of the following: proxy, anonymous, or
proxy anonymous. proxy means use the configured proxy
user. anonymous means use anonymous access. proxy
anonymous means use the configured proxy user and if
that fails, bind anonymously. If this attribute has no value,
anonymous is the default.
defaultSearchBase
is the base DN where clients can find user and group
information, for example DC=cup,DC=hp,DC=com. This
attribute must have a value.
defaultServerList is the same as preferredServerList except the order in
which the specified hosts is tried can be interpreted, and
defaultServerList is used only after
preferredServerList. If neither defaultServerList
nor preferredServerList specifies a host, the client tries
the host where the profile is. Refer to
preferredServerList for more information.
followReferrals
specifies whether or not referrals should be followed. If the
entry is 0 (zero), referrals will not be followed. If the attribute
has no value or any other numeric value, referrals will be
followed.
preferredServerList
is a list of one or more host IP addresses and optional port
numbers where LDAP directory servers are running. Each
host is searched in the order given. If this attribute has no
value, or if none of the specified servers satisfies the client's
request, the defaultServerList is used. Refer to
defaultServerList for more information.
For example, 15.13.128.145:250 is the host at IP address
15.13.128.145 using port number 250. When specifying
multiple hosts, each host:port entry must be separated by a
space.
profileTTL
is the recommended time interval before refreshing the
cached configuration profile.
searchTimeLimit
is how long, in seconds, a client should wait for directory
searches before aborting. 0 (zero) means no time limit. If this
attribute has no value, the default is no time limit.
serviceSearchDescriptor
is one to three custom search descriptors for each service.
The format is Service:BaseDN ?Scope?(Filter) where
Service is one of the supported services passwd, group,
shadow, or PAM. BaseDN is the base DN at which to start
searches. Scope is the search scope and can be one of the
following: one, base, sub. Filter is an LDAP search filter,
142 LDAP-UX Client Services Object Classes