LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

NOTE: The default search base DN for all requests will be set to the previously specified
default search base DN (specified in step 12), usually the domain root. For very large
databases, search performance can be greatly increased by specifying custom search
descriptors. For example, to search user and group information, set the search base DN for
the user and group services to CN=Users, DC=cup, DC=hp, DC=com.
NOTE: If your search filters overlap, enumeration requests will result in duplicate entries
being returned. For example, if one search filter searched a subset of your organization and
a second search filter searched your entire organization, an enumeration request would
return duplicate entries. Refer to “Enumeration Requests” (page 143).
To begin the process to create custom search descriptors, setup will prompt you for the
following information:
LDAP-UX Client Services supports the following services:
1.Password 7.Networks
2.Shadow passwd 8.Hosts
3.Group 9.Services
4.PAM (Pluggable Authentication Module)10.Printers
5.RPC 11.Automount
6 Protocols
You can create up to three custom search descriptors for each name
service to search different locations in the directory.
Do you want to create custom search descriptors? [No]:
Enter 'yes' if you want to create custom search descriptors for any of the supported services.
Then enter the number of the service for which you want to create a custom search descriptor.
If, you do not want to create custom search descriptors, enter 'no' to this prompt to continue
to step 25 of the setup process.
Creating the Custom Search Filter for LDAP Printer Configurator Service
LDAP-UX Client Services uses the printlpd search filter for the printer service as default.
The default object class, printerlprr, is not defined in the Windows Active Directory
Server. To use the LDAP printer configurator feature, you must execute the following
procedures to change default printerlpr object class for the printer service to the alternate
object class to search a different location in the directory. As an example, the following
procedures are used to change the default object class, printerlpr, to the alternate object
class, printQueue:
a. Type yes for the following question and press the return key:
Do you want to create custom search descriptors? [No]: yes
b. If you want to select the printer service, then enter 10 for the following question and
press the return key:
Specify the service you want to map? [0]: 10
c. Next, it will take you to the screen which shows you the following information:
To accept the default shown in brackets, press the Return key.
search base [dc=cup,dc=hp,dc=com]:
search scope (base, one, sub) [sub]
Search filter [(objectclass=printerlpr)]
If you want to create the alternate search filter, printQueue for the printer service,
then type (objectclass=printQueue) for the following prompt and press the
Return key; otherwise press the return key to accept the default search filter,
objectclass=printerlpr:
40 Installing LDAP-UX Client Services