Solaris 10 LDAP (very brief)

#ldapclient -v init -a proxyPassword=proxy -a proxyDN=cn=proxyagent \
,ou=profile,dc=la,dc=alrns,dc=com -a domainname=la.alrns.com 10.16.1.100

Parsing proxyPassword=proxy
Parsing proxyDN=cn=proxyagent,ou=profile,dc=la,dc=alrns,dc=com
Parsing domainname=la.alrns.com
Arguments parsed:
domainName: la.alrns.com
proxyDN: cn=proxyagent,ou=profile,dc=la,dc=alrns,dc=com
proxyPassword: proxy
defaultServerList: 10.16.1.100
Handling init option
About to configure machine by downloading a profile
No profile specified. Using "default"
findBaseDN: begins
findBaseDN: ldap not running
findBaseDN: calling __ns_ldap_default_config()
found 2 namingcontexts
findBaseDN: __ns_ldap_list(NULL, "(&(objectclass=nisDomainObject)(nisdomain=la.alrns.com))"
rootDN[0] dc=la,dc=alrns,dc=com
found baseDN dc=la,dc=alrns,dc=com for domain la.alrns.com
Proxy DN: cn=proxyagent,ou=profile,dc=la,dc=alrns,dc=com
Proxy password: {NS1}ecc423aad0
Credential level: 1
Authentication method: 1
About to modify this machines configuration by writing the files
Stopping network services
Stopping sendmail
stop: sleep 100000 microseconds
stop: sleep 200000 microseconds
stop: network/smtp:sendmail... success
Stopping nscd
stop: sleep 100000 microseconds
stop: system/name-service-cache:default... success
Stopping autofs
stop: sleep 100000 microseconds
stop: sleep 200000 microseconds
stop: sleep 400000 microseconds
stop: sleep 800000 microseconds
stop: sleep 1600000 microseconds
stop: sleep 3200000 microseconds
stop: system/filesystem/autofs:default... success
ldap not running
nisd not running
nis(yp) not running
file_backup: stat(/etc/nsswitch.conf)=0
file_backup: (/etc/nsswitch.conf -> /var/ldap/restore/nsswitch.conf)
file_backup: stat(/etc/defaultdomain)=0
file_backup: (/etc/defaultdomain -> /var/ldap/restore/defaultdomain)
file_backup: stat(/var/nis/NIS_COLD_START)=-1
file_backup: No /var/nis/NIS_COLD_START file.
file_backup: nis domain is "la.alrns.com"
file_backup: stat(/var/yp/binding/la.alrns.com)=-1
file_backup: No /var/yp/binding/la.alrns.com directory.
file_backup: stat(/var/ldap/ldap_client_file)=-1
file_backup: No /var/ldap/ldap_client_file file.
Starting network services
start: /usr/bin/domainname la.alrns.com... success
start: sleep 100000 microseconds
start: sleep 200000 microseconds
start: sleep 400000 microseconds
start: network/ldap/client:default... success
start: sleep 100000 microseconds
start: sleep 200000 microseconds
start: system/filesystem/autofs:default... success
start: sleep 100000 microseconds
start: sleep 200000 microseconds
start: system/name-service-cache:default... success
start: sleep 100000 microseconds
start: sleep 200000 microseconds
start: network/smtp:sendmail... success
restart: sleep 100000 microseconds
restart: sleep 200000 microseconds
restart: milestone/name-services:default... success
System successfully configured



/etc/nsswitch.conf is updated to use ldap

ksh:gulf1# more /etc/nsswitch.conf
#
# /etc/nsswitch.ldap:
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# uses LDAP in conjunction with files.
#
# "hosts:" and "services:" in this file are used only if the
# /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.

# LDAP service requires that svc:/network/ldap/client:default be enabled
# and online.

# the following two lines obviate the "+" entry in /etc/passwd and /etc/group.
passwd: files ldap
group: files ldap

# consult /etc "files" only if ldap is down.
hosts: ldap [NOTFOUND=return] files

# Note that IPv4 addresses are searched for in all of the ipnodes databases
# before searching the hosts databases.
ipnodes: ldap [NOTFOUND=return] files

networks: ldap [NOTFOUND=return] files
protocols: ldap [NOTFOUND=return] files
rpc: ldap [NOTFOUND=return] files
ethers: ldap [NOTFOUND=return] files
netmasks: ldap [NOTFOUND=return] files
bootparams: ldap [NOTFOUND=return] files
publickey: ldap [NOTFOUND=return] files

netgroup: ldap

automount: files ldap
aliases: files ldap

# for efficient getservbyname() avoid ldap
services: files ldap

printers: user files ldap

auth_attr: files ldap
prof_attr: files ldap

project: files ldap
ksh:gulf1# ping instructor1
instructor1 is alive
ksh:gulf1# ldaplist
dn: cn=Directory Administrators, dc=la,dc=alrns,dc=com

dn: ou=People, dc=la,dc=alrns,dc=com

dn: ou=Special Users,dc=la,dc=alrns,dc=com

dn: ou=group,dc=la,dc=alrns,dc=com

dn: ou=Groups, dc=la,dc=alrns,dc=com

dn: ou=rpc,dc=la,dc=alrns,dc=com

dn: ou=protocols,dc=la,dc=alrns,dc=com

dn: ou=networks,dc=la,dc=alrns,dc=com

dn: ou=netgroup,dc=la,dc=alrns,dc=com

dn: ou=aliases,dc=la,dc=alrns,dc=com

dn: ou=hosts,dc=la,dc=alrns,dc=com

dn: ou=services,dc=la,dc=alrns,dc=com

dn: ou=ethers,dc=la,dc=alrns,dc=com

dn: ou=profile,dc=la,dc=alrns,dc=com

dn: ou=printers,dc=la,dc=alrns,dc=com

dn: ou=SolarisAuthAttr,dc=la,dc=alrns,dc=com

dn: ou=SolarisProfAttr,dc=la,dc=alrns,dc=com

dn: ou=Timezone,dc=la,dc=alrns,dc=com

dn: automountMapName=auto_home,dc=la,dc=alrns,dc=com

dn: automountMapName=auto_direct,dc=la,dc=alrns,dc=com

dn: automountMapName=auto_master,dc=la,dc=alrns,dc=com

dn: automountMapName=auto_shared,dc=la,dc=alrns,dc=com

ksh:gulf1# more /etc/nsswitch.conf
#
# /etc/nsswitch.dns:
#
# An example file that could be copied over to /etc/nsswitch.conf; it uses
# DNS for hosts lookups, otherwise it does not use any other naming service.
#
# "hosts:" and "services:" in this file are used only if the
# /etc/netconfig file has a "-" for nametoaddr_libs of "inet" transports.

# DNS service expects that an instance of svc:/network/dns/client be
# enabled and online.

passwd: files
group: files

# You must also set up the /etc/resolv.conf file for DNS name
# server lookup. See resolv.conf(4).
hosts: files dns

# Note that IPv4 addresses are searched for in all of the ipnodes databases
# before searching the hosts databases.
ipnodes: files dns

networks: files
protocols: files
rpc: files
ethers: files
netmasks: files
bootparams: files
publickey: files
# At present there isn't a 'files' backend for netgroup; the system will
# figure it out pretty quickly, and won't use netgroups at all.
netgroup: files
automount: files
aliases: files
services: files
printers: user files

auth_attr: files
prof_attr: files
project: files