LDAP-UX Client Services B.05.01 Administrator Guide for HP directory servers and Windows ADS

5. Run the /opt/ldapux/config/display_profile_cache tool to examine the
configuration of the serviceAuthenticationMethod attribute:
./display_profile_cache
For example:
If the serviceAuthenticationMethod:keyserv:sasl/digest-md5 entry is added
to the profile entry in the LDAP directory, you can see the following information when you run
the display_profile_cache tool:
serv-auth: keyserv:sasl/digest-md5
auth opts: username: uid
realm:
For subsequent LDAP-UX client systems that share the same profile configuration, use the following
steps to download and activate the profile:
1. Log in as root.
2. Go to /opt/ldapux/config:
cd /opt/ldapux/config
3. Use /opt/ldapux/config/get_profile_entry to download the modified LDIF profile:
./get_profile_entry -s nss
4. Run the /opt/ldapux/config/display_profile_cache tool to examine the
configuration of the serviceAuthenticationMethod attribute:
./display_profile_cache
5. Restart the LDAP-UX client daemon, ldapclientd, if you change the authentication method
from nonSSL to SSL. Otherwise, skip this step.
2.4.7.6 Configuring NSS
Configure NSS to enable the LDAP support for NIS-based publickeys.
You can save a copy of /etc/nsswitch.conf file and modify the original to add LDAP support
to the NIS publickey service. See /etc/nsswitch.ldap for a sample.
The following shows the sample file, /etc/nsswitch.ldap:
passwd: files ldap
group: files ldap
hosts: dns files ldap
networks: files ldap
protocols: files ldap
rpc: files ldap
publickey: ldap [NOTFOUND=return] files
netgroup: files ldap
automount: files ldap
aliases: files
services: files ldap
2.5 Postinstallation configuration tasks
This section includes tasks you can perform after performing your guided or customized installation.
2.5.1 Importing name service data into your directory
To import your name service data into your LDAP Directory, consider the following:
• If you have already imported data into your directory with the NIS/LDAP Gateway product,
LDAP-UX Client Services can use that data and you may skip to Section 2.4.5 (page 67).
• If you are using NIS, the migration scripts take your NIS maps and generate LDIF files. These
scripts can then import the LDIF files into your directory, creating new entries in the directory.
2.5 Postinstallation configuration tasks 89