LDAP-UX Integration B.04.10 Release Notes

Profile Format Changes
The profile format has been changed in the product version B.04.10. If you previously configured
LDA-UX B.04.00 or eariler version using the default profile /etc/opt/ldapux/ldapux_profile.ldif, and
now update the product to version B.04.10, the product will automatically update
/etc/opt/ldapux/ldapux_profile.bin to the new format.
For the following cases, you must manually update the profile format by executing each
PROGRAM line after you update the product to version B.04.10 successfully:
• If you previously configured LDA-UX B.04.00 or earlier version using the different profile
other than /etc/opt/ldapux/ldapux_profile.ldif, and now update the product to version B.04.10.
• If you previously configured LDAP-UX B.04.00 or earlier version to work with ADS multiple
domains, and now update the product to version B.04.10, you must manually execute each
PROGRAM line for remote domains configured in /etc/opt/ldapux/ldapux_client.conf.
For example, if /etc/opt/ldapux/ldapux_client.conf contains the following entries:
Service: NSS
PROFILE_ID="local"
LDAP_HOSTPORT="192.10.10.10:389"
PROFILE_ENTRY_DN="cn=ldapuxprof,CN=Configuration,DC=myorg,DC=mycom,DC=com"
PROGRAM="/opt/ldapux/config/create_profile_cache"
PROFILE_ID="eng.myorg.mycom.com"
LDAP_HOSTPORT="192.10.10.11:389"
PROFILE_ENTRY_DN="cn=ldapuxprof,cn=configuration,dc=eng,dc=myorg,dc=mycom,dc=com"
PROGRAM="/opt/ldapux/config/create_profile_cache \
-i /etc/opt/ldapux/domain_profiles/ldapux_profile.ldif.eng.myorig.mycom.com \
-o /etc/opt/ldapux/domain_profiles/ldapux_profile.bin.eng.myorg.mycom.com"
PROFILE_ID="acct.myorg.mycom.com"
LDAP_HOSTPORT="192.10.10.12:389"
PROFILE_ENTRY_DN="cn=ldapuxprof,cn=configuration,dc=acct,dc=myorg,dc=mycom,dc=com"
PROGRAM="/opt/ldapux/config/create_profile_cache \
-i /etc/opt/ldapux/domain_profiles/ldapux_profile.ldif.acct.myorig.mycom.com \
-o /etc/opt/ldapux/domain_profiles/ldapux_profile.bin.acct.myorg.mycom.com"
After you update the product to version B.04.00 successfully, you have to execute PROGRAM
from the command line as follows:
# /opt/ldapux/config/create_profile_cache \
-i /etc/opt/ldapux/domain_profiles/ldapux_profile.ldif.eng.myorig.mycom.com\
-o /etc/opt/ldapux/domain_profiles/ldapux_profile.bin.eng.myorg.mycom.com
# /opt/ldapux/config/create_profile_cache \
-i /etc/opt/ldapux/domain_profiles/ldapux_profile.ldif.acct.myorig.mycom.com\
-o /etc/opt/ldapux/domain_profiles/ldapux_profile.bin.acct.myorg.mycom.com
Then you start or restart the client daemon, /opt/ldapux/bin/ldapclientd.
Removing the LDAP-UX Client Services
You can remove the LDAP-UX Client Services from your system using the SD-UX facility. See
the swremove(1M) man page for details.
1. Log in to your system as root.
2. Remove ldap references from /etc/nsswitch.conf and /etc/pam.conf.
3. Run swremove to remove the LDAP-UX Client Services product. For example:
On HP-UX 11i v1 and v2, run /usr/sbin/swremove J4269AA
On HP-UX 11i v3, run /usr/sbin/swremove LDAPUX
18 LDAP-UX Integration B.04.10 Release Note