LDAP-UX Client Services B.05.00 with Microsoft Windows Active Directory Server Administrator's Guide (obsolete beyond B.05.00)

./ldap_proxy_config -p
PROXY DN: CN=Proxy User, CN=Users, DC=cup, DC=hp, DC=com
6.12 Displaying the current profile
You can display the profile in use by any client by running /opt/ldapux/config/
display_profile_cache on that client. The current profile is in the binary file/etc/opt/
ldapux/ldapux_profile.bin:
cd /opt/ldapux/config
./display_profile_cache
You can also find out from where in the directory the client downloaded the profile by displaying
the DN and server name using the following command: /opt/ldapux/bin/ldapcfinfo -P.
6.13 Creating a new profile
To create a new profile, run /etc/ldapux/config/setup.When setup requests the DN of
the profile, give a DN that does not exist and setup prompts you for the parameters to build a
new profile. The setup program also configures the local client to use the new profile.
Alternatively, you can use your directory administration tools to make a copy of an existing profile
and modify it.
You can also use the interactive tool create_profile_entry to create a new profile as follows:
cd /opt/ldapux/config
./create_profile_entry
Once you create a new profile, configure client systems to use it as described in Section 6.15
(page 130).
6.14 Modifying an existing profile
You can modify an existing profile directly using the Active Directory Services Interface (ADSI) and
the ADSIedit utility on a Windows host. To modify an existing LDAP-UX configuration profile, use
the following steps:
1. 1. Determine the location of the currently used configuration profile as described in “Displaying
the current profile” (page 130).
2. 2. On a Windows host, use ADSIedit to modify the appropriate attributes and values.
3. 3. If profileTTL was previously set in the profile, ldapclientd will periodically update the
configuration on all clients (refer to “Downloading the profile periodically” (page 62) for
details). If profileTTL was not set, or you wish to force an immediate update, use the following
command to download and install the current configuration profile:
/opt/ldapux/config/get_profile_entry -s NSS
Refer to RFC 4876 and Appendix B (page 146) for a complete description of the
DUAConfigProfile.
6.15 Changing which profile a client is using
Each client uses the profile specified in its startup file /etc/opt/ldapux/ldapux_client.conf.
To make a client use a different profile in the directory, edit this file and change the DN specified
in the PROFILE_ENTRY_DN line. Then download the profile as described in Section 2.5.6
(page 62).
130 Administering LDAP-UX Client Services