LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

file. The password to protect that file is stored in
/etc/opt/dirsvr/slapd-domain-master/pk12-passwd.txt.
WARNING! Any user that can access the pk12-passwd.txt file and the cacert.pk12 file
can create a new directory server with sufficient trust to be considered part of the LDAP-UX domain.
Such a user can control what data is visible to the HP-UX hosts. Any host with a server certificate
signed by the CA certificate will be considered a trusted directory server. Be sure to restrict access
to privileged accounts that can bypass file access restrictions on the local host.
2.3.3 Using the guided installation autosetup command—syntax and options for HP
directory server environments
You can run the autosetup script interactively, responding to prompts to provide information.
You can pass parameters in the command line to reduce the need for providing input during the
installation. In some cases, you can run the script in silent mode, which requires no user interaction
during the installation.
To run the script interactively, simply enter the autosetup command as is. The script prompts you
for the minimal information required. To reduce user interaction during the installation, you can
pass parameters by specifying options in the command line. In addition to these options, you can
define environment variables with defined parameter settings; ultimately, this enables you to run
the installation without any manual intervention required. This section describes the command-line
options and environment variables.
The syntax for the autosetup command line is:
autosetup [option1 option1-value [option2 option2-value] ...]
The options are described in Section 2.3.3.1 (page 41).
For detailed information about how to perform the guided installation and how autosetup
configures the LDAP-UX environment, see:
• “Guided installation steps: New Directory Server Installation mode” (page 46)
• “Guided installation steps: Existing Directory Server Installation mode” (page 52)
• “Guided installation steps: Existing LDAP-UX Domain Installation mode” (page 55)
NOTE: When configuring and setting up LDAP-UX, you will likely be prompted for credentials
of an administrator. If you are asked to enter the credentials (password) of a user, make sure that
the connection between your client and the HP-UX system (where you are running autosetup) is
secured and not subject to network eavesdropping. One option to protect such communication
might be to use the ssh protocol when connecting to the HP-UX host being configured.
2.3.3.1 autosetup options
The following options may be specified on the command line for installations:
-D privileged_user_DN When creating a new directory server, or setting up a new
LDAP-UX environment with an existing directory server, this
typically specifies the Directory Manager's distinguished name
(DN) (for the latter scenario, it can be at minimum any user who
has sufficient privileges to update the schema on the directory
server). When configuring LDAP-UX in an existing LDAP-UX
domain, this can be the DN of any member of the
DomainAdmins or HostAdmins groups — host administrators
that have privileges to add hosts to the domain (but more limited
2.3 Guided installation (autosetup) for an HP directory server environment 41