Skip Navigation Links
Working With Naming and Directory Services in Oracle Solaris 11.1
Oracle Solaris 11.1 Information Library
Search Scope:
This Document
Entire Library
Working With Naming and Directory Services in Oracle Solaris 11.1
October 2012
Describes the setup and administration of the DNS, NIS, and LDAP naming services.
Document Information
Preface
Part I About Naming and Directory Services
1. Naming and Directory Services (Overview)
What Is a Naming Service?
Oracle Solaris Naming Services
Description of the DNS Naming Service
Description of Multicast DNS and Service Discovery
Description of the
/etc
Files Naming Service
Description of the NIS Naming Service
Description of the LDAP Naming Services
Description of the Name Service Switch
Naming Services: A Quick Comparison
2. Name Service Switch (Overview)
About the Name Service Switch
Databases and Sources for the Name Service Switch
Search Criteria for the Name Service Switch
Status Messages for the Name Service Switch
Switch Action Options for the Name Service Switch
Default Search Criteria for the Name Service Switch
What If the Syntax Is Wrong?
auto_home
and
auto_master
timezone
and the Name Service Switch
keyserv
and
publickey
Entries in the Name Service Switch
Managing the Name Service Switch
How to Use a Legacy
nsswitch.conf
File
How to Switch the Source for a Database
How to Change the Source for All Naming Databases
DNS and Internet Access
Name Service Switch and Password Information
3. Managing DNS (Tasks)
DNS Overview
Multicast DNS
Multicast DNS Service Discovery
Related Materials About DNS
DNS and the Service Management Facility
Administering DNS (Tasks)
How to Install the DNS Package
How to Configure a DNS Server
How to Create an
rndc.conf
File
How to Configure DNS Server Options
How to Run the DNS Service as an Alternative User
How to Enable a DNS Client
How to Troubleshoot DNS Server Startup Issues
How to Verify the DNS Configuration
Administering Multicast DNS
How to Enable mDNS and DNS Service Discovery
Advertising Resources for DNS
DNS Reference
DNS Files
DNS Commands and Daemons
Compilation Flags Used When BIND Was Built
4. Setting Up Oracle Solaris Active Directory Clients (Tasks)
Overview of the
nss_ad
Naming Service Module
How to Configure the
nss_ad
Module
Password Updates
How the
nss_ad
Naming Service Module Retrieves Data From AD
Retrieving
passwd
Information
Retrieving
shadow
Information
Retrieving
group
Information
Part II NIS Setup and Administration
5. Network Information Service (Overview)
NIS Introduction
NIS Architecture
NIS Machine Types
NIS Servers
NIS Clients
NIS Elements
The NIS Domain
NIS Daemons
NIS Commands
NIS Maps
Default NIS Maps
Using NIS Maps
NIS Map Nicknames
NIS Binding
Server-List Mode
Broadcast Mode
6. Setting Up and Configuring NIS (Tasks)
Configuring NIS Task Map
Before You Begin Configuring NIS
NIS and the Service Management Facility
Planning Your NIS Domain
Identify Your NIS Servers and Clients
Preparing the Master Server
Source Files Directory
passwd
Files and Namespace Security
How to Prepare Source Files for Conversion
Preparing
/var/yp/Makefile
How to Install the NIS Master Server Package
How to Set Up the Master Server
How to Support Multiple NIS Domains on One Master Server
Starting and Stopping NIS Services on an NIS Server
Starting the NIS Service Automatically
How to Enable the NIS Server Services Manually
How to Disable the NIS Server Services
How to Refresh the NIS Server Service
Setting Up NIS Slave Servers
Preparing a Slave Server
How to Set Up a Slave Server
How to Start NIS on a Slave Server
How to Add a New Slave Server
Administering NIS Clients
How to Configure an NIS Client in Broadcast Mode
How to Configure an NIS Client Using Specific NIS Servers
Disabling the NIS Client Services
7. Administering NIS (Tasks)
Password Files and Namespace Security
Administering NIS Users
How to Add a New NIS User to an NIS Domain
Setting User Passwords
NIS Netgroups
Working With NIS Maps
Obtaining Map Information
Changing a Map's Master Server
How to Change a Map's Master Server
Modifying Configuration Files
How to Modify Configuration Files
Modifying and Using
/var/yp/Makefile
Working With the
Makefile
Changing
Makefile
Macros/Variables
Modifying
Makefile
Entries
How to Modify
/var/yp/Makefile
to Use Specific Databases
How to Modify the
Makefile
to Delete Databases
Updating and Modifying Existing Maps
How to Update Maps Supplied With the Default Set
Maintaining Updated Maps
Propagating an NIS Map
Using the
cron
Command for Map Transfers
Using Shell Scripts With
cron
and
ypxfr
Directly Invoking the
ypxfr
Command
Logging
ypxfr
Activity
Modifying Non-Default Maps
Using the
makedbm
Command to Modify a Non-Default Map
Creating New Maps From Text Files
Adding Entries to a File-Based Map
Creating Maps From Standard Input
Modifying Maps Made From Standard Input
Working With NIS Servers
Binding to a Specific NIS Server
How to Set a Machine's NIS Domain Name
How to Configure Machine Host Name and Address Lookup Through NIS and DNS
Turning Off NIS Services
8. NIS Troubleshooting
NIS Binding Problems
Symptoms of NIS Binding Problems
NIS Problems Affecting One Client
ypbind
Not Running on Client
Missing or Incorrect Domain Name
Client Not Bound to Server
No Server Available
ypwhich
Displays Are Inconsistent
When Server Binding is Not Possible
ypbind
Crashes
NIS Problems Affecting Many Clients
rpc.yppasswdd
Considers a Non-Restricted Shell That Begins With
r
to Be Restricted
Network or Servers Are Unreachable
Server Malfunction
NIS Daemons Not Running
Servers Have Different Versions of an NIS Map
Logging
ypxfr
Output
Check the
crontab
File and
ypxfr
Shell Script
Check the
ypservers
Map
Workaround to Update Maps on a Broken Slave Server
ypserv
Crashes
Part III LDAP Naming Services
9. Introduction to LDAP Naming Services (Overview)
Audience Assumptions
Suggested Background Reading
Additional Prerequisite
LDAP Naming Services Compared to Other Naming Services
Advantages of LDAP Naming Services
Restrictions of LDAP Naming Services
LDAP Naming Services Setup (Task Map)
LDAP Data Interchange Format
Using Fully Qualified Domain Names With LDAP
Default Directory Information Tree
Default LDAP Schema
Service Search Descriptors and Schema Mapping
Description of SSDs
attributeMap
Attributes
objectclassMap
Attribute
LDAP Client Profiles
LDAP Client Profile Attributes
Local LDAP Client Attributes
ldap_cachemgr
Daemon
LDAP Naming Services Security Model
Transport Layer Security
Assigning Client Credential Levels
LDAP
anonymous
Credential Level
LDAP
proxy
Credential Level
LDAP
proxy anonymous
Credential Level
LDAP
per-user
Authentication
enableShadowUpdate
Switch
Credential Storage for LDAP Clients
Choosing Authentication Methods for the LDAP Naming Service
Specifying Authentication Methods for Specific Services in LDAP
Pluggable Authentication Methods
pam_unix_*
Service Modules
Kerberos Service Module
LDAP Service Module
PAM and Changing Passwords
LDAP Account Management
LDAP Account Management With the
pam_unix_*
Modules
10. Planning Requirements for LDAP Naming Services (Tasks)
LDAP Planning Overview
Planning the LDAP Network Model
Planning the Directory Information Tree
Multiple Directory Servers
Data Sharing With Other Applications
Choosing the Directory Suffix
LDAP and Replica Servers
Planning the LDAP Security Model
Planning Client Profiles and Default Attribute Values for LDAP
Planning the LDAP Data Population
How to Populate a Server With
host
Entries by Using the
ldapaddent
Command
11. Setting Up Oracle Directory Server Enterprise Edition With LDAP Clients (Tasks)
Configuring Oracle Directory Server Enterprise Edition by Using the
idsconfig
Command
Creating a Checklist Based on Your Server Installation
Attribute Indexes
Schema Definitions
Using Browsing Indexes
Using Service Search Descriptors to Modify Client Access to Various Services
Setting Up SSDs by Using the
idsconfig
Command
Running the
idsconfig
Command
How to Configure Oracle Directory Server Enterprise Edition by Using the
idsconfig
Command
Example
idsconfig
Setup
Populating the Directory Server by Using the
ldapaddent
Command
How to Populate Oracle Directory Server Enterprise Edition With User Password Data by Using the
ldapaddent
Command
Specifying Group Memberships by Using the Member Attribute
Populating the Directory Server With Additional Profiles
How to Populate the Directory Server With Additional Profiles by Using the
ldapclient
Command
Configuring the Directory Server to Enable Account Management
For Clients That Use the
pam_ldap
Module
For Clients That Use the
pam_unix_*
Modules
12. Setting Up LDAP Clients (Tasks)
Prerequisites to LDAP Client Setup
LDAP and the Service Management Facility
Initializing an LDAP Client
How to Initialize an LDAP Client by Using Profiles
How to Initialize an LDAP Client by Using Per-User Credentials
How to Initialize an LDAP Client by Using Proxy Credentials
How to Initialize an LDAP Client to Enable the Updating of Shadow Data
How to Initialize an LDAP Client Manually
How to Modify a Manual LDAP Client Configuration
How to Uninitialize an LDAP Client
Setting Up TLS Security
Configuring PAM
Configuring PAM to Use UNIX
policy
Configuring PAM to Use LDAP
server_policy
Retrieving LDAP Naming Services Information
Listing All LDAP Containers
Listing All User Entry Attributes
Customizing the LDAP Client Environment
Modifying the Name Service Switch for LDAP
Enabling DNS With LDAP
13. LDAP Troubleshooting (Reference)
Monitoring LDAP Client Status
Verifying That the
ldap_cachemgr
Daemon Is Running
Checking the Current Profile Information
Verifying Basic Client-Server Communication
Checking Server Data From a Non-Client Machine
LDAP Configuration Problems and Solutions
Unresolved Host Name
Unable to Reach Systems in the LDAP Domain Remotely
Login Does Not Work
Lookup Too Slow
ldapclient
Command Cannot Bind to a Server
Using the
ldap_cachemgr
Daemon for Debugging
ldapclient
Command Hangs During Setup
14. LDAP Naming Service (Reference)
Blank Checklists for Configuring LDAP
LDAP Commands
General LDAP Tools
LDAP Tools Requiring LDAP Naming Services
Example
pam_conf
File Using the
pam_ldap
Module for Account Management
IETF Schemas for LDAP
RFC 2307bis Network Information Service Schema
Mail Alias Schema
Directory User Agent Profile (
DUAProfile
) Schema
Oracle Solaris Schemas
Projects Schema
Role-Based Access Control and Execution Profile Schema
Internet Print Protocol Information for LDAP
Internet Print Protocol Attributes
Internet Print Protocol
ObjectClasses
Printer Attributes
Sun Printer
ObjectClasses
Generic Directory Server Requirements for LDAP
Default Filters Used by LDAP Naming Services
15. Transitioning From NIS to LDAP (Tasks)
NIS-to-LDAP Service Overview
NIS-to-LDAP Tools and the Service Management Facility
NIS-to-LDAP Audience Assumptions
When Not to Use the NIS-to-LDAP Service
Effects of the NIS-to-LDAP Service on Users
NIS-to-LDAP Transition Terminology
NIS-to-LDAP Commands, Files, and Maps
Supported Standard Mappings
Transitioning From NIS to LDAP (Task Map)
Prerequisites for the NIS-to-LDAP Transition
Setting Up the NIS-to-LDAP Service
How to Set Up the N2L Service With Standard Mappings
How to Set Up the N2L Service With Custom or Nonstandard Mappings
Examples of Custom Maps
NIS-to-LDAP Best Practices With Oracle Directory Server Enterprise Edition
Creating Virtual List View Indexes With Oracle Directory Server Enterprise Edition
VLVs for Standard Maps
VLVs for Custom and Nonstandard Maps
Avoiding Server Timeouts With Oracle Directory Server Enterprise Edition
Avoiding Buffer Overruns With Oracle Directory Server Enterprise Edition
NIS-to-LDAP Restrictions
NIS-to-LDAP Troubleshooting
Common LDAP Error Messages
NIS-to-LDAP Issues
Debugging the
NISLDAPmapping
File
N2L Server Timeout Issue
N2L Lock File Issue
N2L Deadlock Issue
Reverting to NIS
How to Revert to Maps Based on Old Source Files
How to Revert to Maps Based on Current DIT Contents
Glossary
Index
Numbers and Symbols
A
B
C
D
E
F
G
H
I
K
L
M
N
O
P
R
S
T
U
V
W
X
Y