LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

NOTE: This white paper was published before HP-UX Directory Server 8.1 was introduced.
However, much of the information continues to be relevant and helpful.
• Most examples in this chapter are based on the HP-UX Directory Server and assume you have
some knowledge of this directory and its tools, such as the Directory Server Console and
ldapsearch. If you have another directory server, consult the documentation for your directory
server for more information.
• For more information about how to integrate LDAP-UX Client Services with the Windows Server
2003 R2 or 2008 Active Directory, see “Installing and configuring LDAP-UX Client Services
for a Windows ADS environment” (page 114).
• For illustrative purposes, examples in this chapter use a base DN of o=hp.com.
2.2 Selecting the method of installation: guided or customized
LDAP-UX Client Services software releases before B.05.00 provided only one installation option,
the customized installation using the setup program. This is a traditional screen-based program
that requires that you run several procedures to set up and configure a new directory server instance
after installing the directory server product bundle. This option enables an experienced administrator
to customize the software.
LDAP-UX Client Services B.05.00 introduces the guided installation using the autosetup program,
which greatly simplifies the installation and configuration process. This is a simple, quick, and
automated procedure that gets you started with a basic implementation of the software, requiring
little input other than identifying administrator-level entities. These entities automatically perform
privileged configuration tasks for you. The guided installation enables you to install and configure
a new instance of an LDAP directory server automatically, ready for use with LDAP-UX. The
autosetup script creates and configures the new directory server instance with SSL/TLS services
enabled. You can customize the software afterward.
Both the setup and autosetup programs are available in /opt/ldapux/config.
The guided installation (autosetup) is most advantageous if:
• You prefer simplicity, ease, and quickness of installation.
• You prefer an installation that enables immediate use of LDAP-UX, with minimal input required.
The autosetup program automatically provides default values for many parameters that
must be provided manually during a customized installation (you can customize parameters
later, if desirable).
• You are installing and configuring LDAP-UX for the first time in an environment that has no
LDAP directory server instance. The autosetup program detects whether a directory server
instance already exists, and if one is not found, the script can set up the directory server for
you.
NOTE: If you use the custom installation in an environment that lacks an LDAP directory
server, you must set up the directory server yourself.
• You want HP-UX host management automatically enabled in the directory server. For more
information about host management, see Section 7.8 (page 235).
• You want secure shell (ssh) host key management automatically enabled (ssh key management
is not supported in Windows ADS environments). For more information about managing ssh
host keys, see “Managing ssh host keys with LDAP-UX (HP directory servers only)” (page 258).
You may also use autosetup to install LDAP-UX Client Services into a single Windows domain
that has been configured with SSL support. For information about installing and configuring LDAP-UX
Client Services into a Windows domain, see “Installing and configuring LDAP-UX Client Services
for a Windows ADS environment” (page 114).
26 Installing and configuring LDAP-UX Client Services for an HP server environment