[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
configuring Solaris 8 pre-installed LDAP as NIS replacement?
Has anyone successfully pulled together the information necessary to set
up a directory to work as a NIS replacement for Solaris 8 clients using
the "pre-installed" ldap support? Solaris 8 appears to come
pre-installed with the necessary modules (nss_ldap, pam_ldap) to use
LDAP as a replacement for NIS, but documentation for setting it up seems
to be almost non-existent!
To start with, I've run into schema isssues. Their client
configuration utility "ldapclient", which is supposed to be the way to
quickly configure a client for LDAP replacement of NIS, looks for a
"nisDomainObject", which I was unable to find in the current set of
nis/rfc2307 defs. I did eventually locate a copy of Luke's 2307bis
draft with the additional defs (though that was difficult, as it
appears to have expired and been dropped from the IETF site), so I was
able to add the missing classes and attributes by hand.
If I run their "ldap_gen_profile", which is supposed to create a LDIF
file that can used to set up an LDAP entry that client machines can then
use to when being configured for LDAP support, I see another set of
objects and atttributes ( SolarisNamingProfile, SolarisLDAPServers,
SolarisSearchBaseDN, etc.) that also don't appear to be in the schemas
known to either the OpenLDAP server or the Netscape Directory Server.
Anyone know where I can find the Solaris schema?
Also, one side note about schema conflicts that I noticed when searching
through the schemas. RFC2307(bis) defines "nisMap" as .2.9, and appears
to skip .2.13 in the list of class definitions. Netscape's server
appears to define .2.9 as "automount" (noting that it is deprecated),
and defines .2.13 as "nisMap".
Anyhow, if anyone out there has been through this same headache of
trying to set up a Solaris 8 ldap client with the pre-installed software
and can post a few details on how to do it, I'm sure it will be
appreciated by more than just me.
Donald Hudson
donh@ejasent.com