LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

and creation of a host principle used for proxied authentication. You can customize the software
afterward. Both of these programs are available in /opt/ldapux/config.
The guided installation (autosetup) is most advantageous if:
• You prefer simplicity, ease, and quickness of installation.
• You prefer an installation that enables immediate use of LDAP-UX, with minimal input required.
The autosetup program automatically provides default values for many parameters that
must be provided manually during a customized installation (you can customize parameters
later, if desirable).
• You want HP-UX host management automatically enabled in the Active Directory Server. For
more information about host management, see Section 7.8 (page 235).
• Your Active Directory Server has been enabled for using SSL. The guided installation will
automatically download the domain’s CA certificate and provide a simple means to distribute
it to additional HP-UX clients.
The customized installation (setup) is advantageous if:
• You are more experienced and familiar with the product, and you want to manually customize
the software during the installation.
• You want to install the HP-UX host into multiple-domain Windows environment. Guided
installation supports installation into a single windows domain only.
• You want a small LDAP deployment using a local-only profile. The local-only profile can also
be useful for testing purposes and for environments where administrators lack server
administrative privileges. Local-only profile support is enabled by running the setup program
with the -l option. For more information about using this option, see Section 3.4.6.2
(page 139).
3.3 Guided installation (autosetup) for a Windows ADS environment
The guided installation greatly simplifies installation of LDAP-UX into a Windows domain. Setting
up an HP-UX client with LDAP-based security can be accomplished in a matter of moments. The
information required for installation is kept to an absolute minimum. For example, the only
information required when installing and configuring LDAP-UX into an existing domain is the name
of the directory server or the name of the domain being joined, and the credentials of a user who
is permitted to join the host to the domain. The guided installation can automatically discover the
ADS server if the HP-UX host is using the Windows DNS server for that domain. While the guided
installation (autosetup) is intended to be an interactive utility, you can use command-line options
to specify input required by the utility and make it completely automated. The command-line options
are described in detail in Section 3.3.2 (page 118).
While one of the strengths of LDAP-UX is its ability to integrate into any environment using a variety
of configuration options, the guided installation configures LDAP-UX with the most commonly-used
installation settings that support trusted integration into a Windows domain. To assure that the
associated Active Directory Server is trusted in the security management space for HP-UX, the
guided installation requires that the Active Directory Server be enabled for SSL support.
3.3 Guided installation (autosetup) for a Windows ADS environment 115