HP-UX Reference (11i v3 07/02) - 1M System Administration Commands A-M (vol 3)

l
ldapclientd(1M) ldapclientd(1M)
NAME
ldapclientd - LDAP client daemon process
SYNOPSIS
Startup
/opt/ldapux/bin/ldapclientd
[-d level][-o { stdout | syslog | file[
=size]}][-z]
Control
/opt/ldapux/bin/ldapclientd
{[-d level][-o { stdout | syslog | file[
=size]}]
/opt/ldapux/bin/ldapclientd
{ -D [cache]|-E [cache]| -S [cache]}
/opt/ldapux/bin/ldapclientd
{ -f | -k | -L | -h | -r
}
DESCRIPTION
ldapclientd is a daemon process that enables LDAP-UX. It enables LDAP-UX clients to work with
LDAP directory servers. ldapclientd caches entries, supports multiple domains in the Windows
2000/2003 Active Directory Server (ADS), supports X.500 group membership, maintains connections to the
LDAP Directory Server, and manages remote LP printers.
In addition to handling communication and maintaining the connection between the LDAP-UX client and
LDAP directory server, ldapclientd provides the following:
• Services:
1. Enables LDAP-UX to use LDAP directory servers to support these services:
automount
group
hosts
netgroup
networks
passwd
printers
protocols
rpc
services
X.500
group membership
Note: LDAP-UX does not support netgroup and automount with the Microsoft Windows
2000/2003 Active Directory Server.
• Performance:
1. Caches entries to reduce LDAP-UX client response time retrieving:
automount
group
netgroup
passwd
X.500
group membership
Note: Since pwgrd still caches passwd and group entries that did not come from the directory
server (ldapclientd only caches entries from directory servers), pwgrd is still useful to maintain
high performance.
2. Reuses and maintains connections to the directory server, reducing binding and disconnection which
significantly reduces the load on the server and network traffic.
• Capability:
1. Multiple domain Active Directory Server (ADS).
Enables LDAP-UX to use multiple domains for directory servers like Windows 2000/2003 Active
Directory Server (ADS). It allows PAM_Kerberos to authenticate POSIX users stored in remote
domains.
2. Automatic profile downloading.
Updates the LDAP client configuration profile by downloading a newer copy from the directory server
as the current one’s profileTTL (Time To Live) expires.
HP-UX 11i Version 3: February 2007 − 1 − Hewlett-Packard Company 433