Naming and Directory Services (DNS, NIS, and LDAP)

The ldapclient utility is the key to setting up an LDAP client, as it performs all ofthe above steps, except for starting the server. The rest of this chapter will showexamples of how to use the ldapclient utility to set up an LDAP client and use thevarious other LDAP utilities to get information about, and check the status of, anLDAP client.LDAP and the Service ManagementFacilityThe LDAP client service is managed by using the Service Management Facility. For anoverview of SMF, refer to “Managing Services (Overview)” in System AdministrationGuide: Basic Administration. Also refer to thesvcadm(1M) and svcs(1) man pages formore details.■Administrative actions on this service, such as enabling, disabling, or restarting,can be performed by using the svcadm command.Tip – Temporarily disabling a service by using the -t option provides someprotection for the service configuration. If the service is disabled with the -toption, the original settings would be restored for the service after a reboot. If theservice is disabled without -t, the service will remain disabled after reboot.■■The Fault Managed Resource Identifier (FMRI) for the LDAP client service issvc:/network/ldap/client:.You can query the status of the LDAP client and ldap_cachemgr by using thesvcs command.■Example of svcs command and output.■# svcs \*ldap\*STATE STIME FMRIonline 15:43:46 svc:/network/ldap/client:defaultExample of svcs -l command and output. To get the output shown below, youmust use the instance name in the FMRI.# svcs -l network/ldap/client:defaultfmrisvc:/network/ldap/client:defaultenabled truestate onlinenext_state nonerestarter svc:/system/svc/restarter:defaultcontract_id 1598dependency require_all/none file://localhost/var/ldap/ldap_client_file (-)dependency require_all/none svc:/network/initial (online)178 System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP) • January 2005