LDAP-UX Client Services B.04.15 Administrator's Guide

• Select the first name component of the “Subject:” name. For example, if the
“Subject:” string is “CN=ldapserver.example.com, O=Example Corp” then
the name component would be “ldapserver.example.com".
NOTE: Depending on how your certificate administrator manages your network, the above
server certificate may not be found in your cert8.db file. Instead you may only find
certificates for any trusted Certificate Authorities. In this case, contact your certificate
administrator for the LDAP server certificate details.
2. In a separate window, use the ldapentry tool to modify the value of the
preferredServerList attribute with the LDAP server name found in step 1. See
“Modifying a Profile” (page 127) for detailed information on changing LDAP-UX configuration
profile settings manually.
3. Examine the “preferedServerList” attribute
4. Use the nslookup tool to verify the IP address specified in the preferred server list matches
that of the name of the host name found in step 1 above.
For example, if the preferredserverlist attribute value is 192.168.1.1:636 and “Subject”
is CN=ldapserver.example.com,O=Example Corp, then
$ nslookup 192.168.1.1
Name Server: dns-resolver.example.com Address: 192.169.1.254 Trying
DNS Name: ldapserver.example.com Address: 192.168.1.1
2.8 Configure the LDAP-UX Client Services with SSL or TLS Support 45