LDAP and the Service Management Facility

The LDAP client service is managed by using the Service Management Facility. For an overview of SMF, refer to Chapter 16, Managing Services (Overview), in System Administration Guide: Basic Administration. Also refer to the svcadm(1M) and svcs(1) man pages for more details.

• Administrative actions on this service, such as enabling, disabling, or restarting, can be performed by using the svcadm command.

  ---

  Tip - Temporarily disabling a service by using the -t option provides some protection for the service configuration. If the service is disabled with the -t option, the original settings would be restored for the service after a reboot. If the service is disabled without -t, the service will remain disabled after reboot.

  ---

• The Fault Managed Resource Identifier (FMRI) for the LDAP client service is svc:/network/ldap/client:<instance>.

• You can query the status of the LDAP client and ldap_cachemgr by using the svcs command.

  • Example of svcs command and output.

    # svcs \*ldap\*
    STATE         STIME     FMRI
    online        15:43:46  svc:/network/ldap/client:default

  • Example of svcs -l command and output. To get the output shown below, you must use the instance name in the FMRI.

    # svcs -l network/ldap/client:default
    fmri         svc:/network/ldap/client:default
    enabled      true
    state        online
    next_state   none
    restarter    svc:/system/svc/restarter:default
    contract_id  1598 
    dependency   require_all/none file://localhost/var/ldap/ldap_client_file (-)
    dependency   require_all/none svc:/network/initial (online)
    dependency   require_all/none svc:/system/filesystem/minimal (online)

• You can check a daemon's presence by using the ps command.

  # ps -e | grep slapd
    root 23320     1   0   Aug 27 ?       16:30 ./ns-slapd -D \
    /usr/iplanet/ds5/slapd-lastrev -i /usr/iplanet/ds5/slapd-lastrev/
    root 25367 25353   0 15:35:19 pts/1     0:00 grep slapd

  ---

  Note - Do not use the -f option with ps because this option attempts to translate user IDs to names, which causes more naming service lookups that might not succeed.

  ---