LDAP-UX Client Services B.05.00 with Microsoft Windows Active Directory Server Administrator's Guide (obsolete beyond B.05.00)

NOTE:
• White spaces between numbers are ignored.
• Only one line of the list is accepted; however, the line can be wrapped.
• The maximum number of ranges is 20.
When the disable_uid_range is turned on, the disabled UIDs will not be displayed when you
run commands such as pwget, listusers, and logins.
NOTE: The passwd command may still allow you to change a password for a disabled user
when alternative authentication methods, such as PAM Kerberos, are used since LDAP does not
control these subsystems.
2.5.5 Configuring subsequent client systems
Once you have configured your directory and one client system, you can configure subsequent
client systems using the following steps. Modify any of these files as needed. If you used autosetup
to create your LDAP-UX domain, you should continue to use autosetup to configure subsequent
clients. To do this, you can run autosetup in silent mode, as described in Section 2.3.4.2
(page 27).
1. Use swinstall to install LDAP-UX Client Services on the client system. This does not require
rebooting the client system.
Alternatively, use the guided installaton (autosetup), for a simpler, automated process. If
you use autosetup, you can skip to the last step to verify the installation and configuration
on the client.
2. Copy the following files from a configured client to the client being configured:
• /etc/opt/ldapux/ldapux_client.conf
• /etc/opt/ldapux/ldapux_profile.ldif
• /etc/opt/ldapux/pcred only if you have configured a proxy user, not if you are
using only anonymous access
• /etc/pam.conf
• /etc/nsswitch.conf
• cert8.db and key3.db files if SSL is enabled
3. Enable the LDAP-UX configuration profile as follows:
cd /opt/ldapux/config
./create_profile_cache
If you are using multiple domains, download profiles for the GCS and each remote domain.
Refer to “Downloading an automatic profile” (page 65) for information about downloading
these profiles.
Alternatively you could interactively run the setup program to download the profile from the
directory and respond No when prompted to select if you want to change the current
configuration:
cd /opt/ldapux/config
./setup
4. If you are using a proxy user, configure and verify the proxy user by calling
ldap_proxy_config as follows:
cd /opt/ldapux/config
./ldap_proxy_config -v
2.5 Post-installation configuration tasks 61