Solaris10安装配置LDAP(iPlanet Directory Server )

Solaris10安装光盘自带了iPlanet Directory Server安装包，系统管理员可以利用iPlanet Directory Server在Solaris系统创建一个LDAP Server。

LDAP Server : 10.0.22.20

LDAP Client : 10.0.22.30

1. 安装配置LDAP Server

1.1 在LDAP服务器上设置缺省域名

设置缺省域名：
root@ladpsrv # domainname local.com
root@ladpsrv # domainname > /etc/defaultdomain
root@ladpsrv # more /etc/defaultdomain
local.com

将域名信息加入/etc/hosts文件
root@ladpsrv # more /etc/hosts
#
# Internet host table
#
::1     localhost
127.0.0.1       localhost
10.0.22.20      ldapsrv ldapsrv.local.com       loghost

1.2 安装iPlanet Directory Server软件包

root@ladpsrv # cd /cdrom/sol_10_811_x86/Solaris_10/Product/

root@ladpsrv # pkgadd -d . IPLTnspr
root@ladpsrv # pkgadd -d . IPLTnss
root@ladpsrv # pkgadd -d . IPLTjss
root@ladpsrv # pkgadd -d . IPLTnls
root@ladpsrv # pkgadd -d . IPLTpldap
root@ladpsrv # pkgadd -d . IPLTdsu
root@ladpsrv # pkgadd -d . IPLTdsr

1.3 配置LDAP Server

root@ladpsrv # directoryserver setup
/usr/iplanet/ds5/setup/setup -S

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

Welcome to the iPlanet Server Products configuration program
This program will configure iPlanet Server Products and the
iPlanet Console on your computer.

You must have "root" privilege to configure the
software.

Tips for using the configuration program:
- Press "Enter" to choose the default and go to the next screen
- Type "Control-B" to go back to the previous screen
- Type "Control-C" to cancel the configuration program
- You can enter multiple items using commas to separate them.
For example: 1, 2, 3

Would you like to continue with configuration? [Yes]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

Select the items you would like to configure:

1. iPlanet Servers
Configures iPlanet Servers with the integrated iPlanet Console
onto your computer.

2. iPlanet Console
Configures iPlanet Console
as a stand-alone Java application on your computer.

To accept the default shown in brackets, press the Enter key.

Select the component you want to configure [1]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

Choose a configuration type:

1. Express Configuration
Allows you to quickly configure the servers using the most
common options and pre-defined defaults. Useful for quick
evaluation of the products.

2. Typical Configuration
Allows you to specify common defaults and options.

3. Custom Configuration
Allows you to specify more advanced options. This is
recommended for experienced server administrators only.

To accept the default shown in brackets, press the Enter key.

Choose a configuration type [2]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

iPlanet Server Products components:

Components with a number in () contain additional subcomponents
which you can select using subsequent screens.

1. iPlanet Directory Suite (2)

Specify the components you wish to configure [All]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

iPlanet Directory Suite components:

Components with a number in () contain additional subcomponents
which you can select using subsequent screens.

1. iPlanet Directory Server
2. iPlanet Directory Server Console

Specify the components you wish to configure [1, 2]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

Enter the fully qualified domain name of the computer
on which you're configuring server software. Using the form
<hostname>.<domainname>
Example: eros.airius.com.

To accept the default shown in brackets, press the Enter key.

Computer name [ladpsrv.local.com]: <回车>

Sun-Netscape Alliance
iPlanet Server Products Configuration
--------------------------------------------------------------------------------

Choose a Unix user and group to represent the iPlanet server
in the user directory. The iPlanet server will run as this user.
It is recommended that this user should have no privileges
in the computer network system. The Administration Server
will give this group some permissions in the server root
to perform server-specific operations.

If you have not yet created a user and group for the iPlanet
server,create this user and group using your native UNIX
system utilities.

To accept the default shown in brackets, press the Return key.

System User [nobody]: <回车>

System Group [nobody]: <回车>