NIS/LDAP Gateway Administrator's Guide

2 Installing the NIS/LDAP Gateway
This chapter describes the decisions you need to make and the steps you need to take to install
and configure the NIS/LDAP Gateway.
Before You Begin
This section lists some things to keep in mind as you plan your installation.
• You must have an LDAP directory. You can obtain Netscape Directory Server 6.21 or Red
Hat Directory Server 7.x for HP-UX in HP-UX 11i Foundation OE, Application Release CD
or from http://www.hp.com/go/softwaredepot.
You can view the documentation at http://docs.hp.com/hpux/internet. If you have another
directory, consult the documentation for your directory.
• See the NIS/LDAP Gateway Release Notes (part number J4269-90002) for additional information.
• Most examples here use the Netscape/Red Hat Directory for HP-UX and assume you have
some knowledge of this directory and its tools, such as the Directory Console and ldapsearch.
If you have another directory, consult your directory's documentation for specific information.
• The following steps assume you want to emulate the NIS environment on HP-UX as closely
as possible. You have a lot of flexibility to do things differently. Modify these steps as needed
for your environment.
• The examples use a root DN of o=hp.com for illustrative purposes.
Plan Your Installation and Testing
Before beginning your installation, you should plan how you will set up and test your NIS/LDAP
Gateway environment before putting it into production. This will be similar to the process used
to set up and test an NIS environment. Consider the following questions:
• How many LDAP directory servers and replicas will you need?
Each NIS/LDAP Gateway server binds to an LDAP directory server containing your NIS
data. Multiple NIS/LDAP Gateway servers can bind to a single directory server or replica
server. The answer depends on your environment, the size and configuration of your directory
and how many users you have. Depending on these factors, you may have anywhere from
ten to over one hundred NIS/LDAP Gateway servers for each LDAP directory server.
• How many NIS/LDAP Gateway servers will you need?
This also depends on your environment. A rule of thumb might be to have the same number
of NIS/LDAP Gateway servers as you have NIS servers currently.
• Where will you get your NIS data from when migrating it to the directory?
You can get it from the same source files you create your NIS maps from or you can get it
from your NIS maps themselves. The key is to use up-to-date information. You will probably
need to keep your NIS maps and your directory in sync for a time while testing. One of the
contributed tools, ldifdiff, can help you keep your data in sync.
• Where in your directory will you put your NIS data?
If you are starting with a brand new directory, you will create a new subtree. If you already
have a directory, you can place your NIS data in a separate, new subtree of the directory.
Or you can merge your NIS data into your existing directory.
• How will you put your NIS data into your directory?
If you are starting with a brand new directory, the migration scripts can build a new directory
subtree for your NIS data.
Before You Begin 19