LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

NOTE: The userPassword attribute is mapped to *NULL*
to prevent passwords from being returned for increased
security and to prevent PAM_UNIX from authenticating
users in the LDAP directory. Mapping to *NULL* or any
other nonexistent attribute means do not return anything.
authenticationMethod
is how the client binds to the directory. The value can be
simple indicating bind using a user name and password.
If this attribute has no value, simple is the default.
bindTimeLimit
is how long, in seconds, the client should wait to bind before
aborting. 0 (zero) means no time limit. If this attribute has
no value, the default is no time limit.
credentialLevel
is the identity clients use when binding to the directory. The
value must be one of the following: proxy, anonymous, or
proxy anonymous. proxy means use the configured proxy
user. anonymous means use anonymous access. proxy
anonymous means use the configured proxy user and if
that fails, bind anonymously. If this attribute has no value,
anonymous is the default.
defaultSearchBase
is the base DN where clients can find user and group
information, for example DC=cup,DC=hp,DC=com. This
attribute must have a value.
defaultServerList
is a list of one or more host IP addresses and optional port
numbers where LDAP directory servers are running. Each
host is searched in the order given. The LDAP-UX client
searches the servers until it finds one that responds,
defaultServerList is used only if the preferedServerList
attribute has no value, or if none of the specified servers in
preferredServerList responds the client request. If neither
defaultServerList nor preferredServerList specifies a host,
the LDAP-UX client does not try to connect to any LDAP
directory server. See preferredServerList below.
For example, 15.10.120.150:350 is the host at IP address
15.10.120.150 using port number 350. When specifying
multiple hosts, each host:port entry must be separated by a
space.
followReferrals
specifies whether or not referrals should be followed. If the
entry is 0 (zero), referrals will not be followed. If the attribute
has no value or any other numeric value, referrals will be
followed.
preferredServerList
is a list of one or more host IP addresses and optional port
numbers where LDAP directory servers are running. Each
host is searched in the order given. If this attribute has no
value, or if none of the specified servers satisfies the client's
request, the defaultServerList is used. See
defaultServerList for more information.
For example, 15.13.128.145:250 is the host at IP address
15.13.128.145 using port number 250. When specifying
multiple hosts, each host:port entry must be separated by a
space.
profileTTL
is the recommended time interval before refreshing the
cached configuration profile.
searchTimeLimit
is how long, in seconds, a client should wait for directory
searches before aborting. 0 (zero) means no time limit. If this
attribute has no value, the default is no time limit.
160 LDAP-UX Client Services Object Classes