Using the LDAP Naming Service in Trusted Extensions

The LDAP naming service is managed in Trusted Extensions as it is managed in the Solaris OS. The following is a sample of useful commands, and contains references to more detailed information:

• For strategies to solve LDAP configuration problems, see Chapter 13, LDAP Troubleshooting (Reference), in System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP).

• To troubleshoot client-to-server LDAP connection problems that are affected by labels, see How to Debug a Client Connection to the LDAP Server.

• To troubleshoot other client-to-server LDAP connection problems, see Chapter 13, LDAP Troubleshooting (Reference), in System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP).

• To display LDAP entries from an LDAP client, type:

  $ ldaplist -l
  $ ldap_cachemgr -g

• To display LDAP entries from an LDAP server, type:

  $ ldap_cachemgr -g
  $ idsconfig -v

• To list the hosts that LDAP manages, type:

  $ ldaplist -l hosts Long listing
  $ ldaplist hosts One-line listing

• To list information in the Directory Information Tree (DIT) on LDAP, type:

  $ ldaplist -l services | more
  dn: cn=apocd+ipServiceProtocol=udp,ou=Services,dc=exampleco,dc=com
    objectClass: ipService
    objectClass: top
    cn: apocd
    ipServicePort: 38900
    ipServiceProtocol: udp
  
  ...
  $ ldaplist services name
  dn=cn=name+ipServiceProtocol=udp,ou=Services,dc=exampleco,dc=com

• To display the status of the LDAP service on the client, type:

  # svcs -xv network/ldap/client
  svc:/network/ldap/client:default (LDAP client)
   State: online since date
     See: man -M /usr/share/man -s 1M ldap_cachemgr
     See: /var/svc/log/network-ldap-client:default.log
  Impact: None.

• To start and stop the LDAP client, type:

  # svcadm enable network/ldap/client

  # svcadm disable network/ldap/client

• To start and stop the LDAP server in version 5.2 of Sun Java System Directory Server software, type:

  # installation-directory/slap-LDAP-server-hostname/start-slapd
  # installation-directory/slap-LDAP-server-hostname/stop-slapd

• To start and stop the LDAP server in version 6 of Sun Java System Directory Server software, type:

  # dsadm start /export/home/ds/instances/your-instance
  # dsadm stop /export/home/ds/instances/your-instance

• To start and stop a proxy LDAP server in version 6 of Sun Java System Directory Server software, type:

  # dpadm start /export/home/ds/instances/your-instance
  # dpadm stop /export/home/ds/instances/your-instance