LDAP-UX Client Services B.04.15 with Microsoft Windows Active Directory Server Administrator's Guide (edition 8)

Assume the user account jimmy resides in domainA, domainB, and domainC simultaneously:
• If domain A is the local domain, jimmy in domainA will log into HP-UX client.
• If all three domains are remote domains, and are configured in the sequence: domainB,
domainC, domainA, then jimmy in domainB, the first domain in the configuration, will log
into HP-UX client.
• If all three domains are remote domains, and the GCS is selected, then jimmy cannot log
into HP-UX client at all since LDAP-UX cannot distinguish which jimmy is preferred (when
duplicate entries exist for GCS, none is valid).
• If all three domains are remote domains, domainC is included in your remote domain
configuration, and GCS is selected, then jimmy in domainC logs into HP-UX client.
If the user name jimmy is unique in the forest, but the uid number is not unique, jimmy can log
into the HP-UX client, but depending on if the uid number can be returned, he may have problems
changing his password using the passwd command.
Changing Multiple Domain Configurations
The following sections explain how to modify your multiple domain configuration.
Removing a Remote Domain from the Search Scope
If you originally configure several remote domains without configuring the GCS, and you want
to exclude a domain from the search scope, perform one of the following options:
• Run the setup tool, /opt/ldapux/config/setup, to re-configure multiple domains and
exclude the one you want to remove.
• Manually edit /etc/opt/ldapux/ldapux_client.conf to remove the configuration
for that specific domain and remove its corresponding profiles:
— /etc/opt/ldapux/domain_profiles/ldapux_profile.ldif.<domain>
— /etc/opt/ldapux/domain_profiles/ladpux_profile.bin
NOTE: The second option is not recommended unless you are an expert administrator of
LDAP-UX in an ADS multiple domain environment.
Both options require you to restart the client daemon /opt/ldapux/bin/ldapclientd
for the changes to take effect.
Adding a Remote Domain to the Search Scope
If you originally configure several remote domains without configuring the GCS, and you want
to add a new remote domain into the search scope, run the setup tool to re-configure the multiple
domains and include the new domain in your configuration. When setup is complete, restart the
client daemon, /opt/ldapux/bin/ldapclientd.
Re-ordering the Remote Domain Search Sequence
The search sequence is the sequence in which you configured the remote domains during setup.
This sequence is also shown in /etc/opt/ldapux/ldapux_client.conf. To re-order the
remote domain search sequence, either run setup to re-configure the remote domains, or
manually edit the /etc/opt/ldapux/ldapux_client.conf file to re-arrange the order.
Restart the client daemon for the change to take effect.
Adding the GCS into the Search Scope
The only way that you can add the GCS into the search scope is to run setup and add the GCS
as your multiple domain support. Restart the client daemon for the change to take effect.
Changing Multiple Domain Configurations 61