Naming and Directory Services (DNS, NIS, and LDAP)

Information Tree (DIT), the mapping file also allows establishing time-to-live (TTL) forNIS+ data sourced from LDAP. While there often is a one-to-one mapping betweenNIS+ column values and LDAP attribute values, the mapping file can be used tomaintain more complicated relationships as well.The /etc/default/rpc.nisd file is used to select LDAP server and authentication,and controls some general rpc.nisd behavior. See rpc.nisd(4). The details of themapping are specified via the /var/nis/NIS+LDAPmapping file. For moreinformation, see NIS+LDAPmapping(4). The name of the mapping file can be changedby editing the /lib/svc/method/nisplus file. See “NIS+ to LDAP Tools and theService Management Facility” on page 253 for more information.The following terms are used in this chapter.■ ContainerA container is the location in the LDAP DIT where all related entries are stored. Forexample, user account information is often stored in the ou=People container,while host address information can be stored in the ou=Hosts container.■■■NetnameA netname is an entity in secure RPC (user or machine) that can be authenticated.MappingMapping is the relationship between an NIS+ object and an LDAP entry. Forexample, data from the name column in the passwd.org_dir NIS+ table (such asthe user name of an account) corresponds to the LDAP uid attribute of theposixAccount object class in the ou=People container. The configuration canestablish a mapping between the name column and the uid attribute. You can alsosay that the name column is mapped to the uid attribute (or vice versa).PrincipalA principal is an entity in NIS+ (user or machine) that can be authenticated.Usually, there is a one-to–one correspondence between netnames and principalnames.rpc.nisd Configuration FilesTwo configuration files control rpc.nisd operation.■■/etc/default/rpc.nisdThis file contains information regarding the LDAP server and authentication, theNIS+ base domain, the LDAP default search base, exception processing, andgeneral rpc.nisd configuration, which applies whether or not LDAP mapping isin effect./var/nis/NIS+LDAPmappingThis file contains information on mapping of NIS+ data to and from LDAP. Thetemplate file (/var/nis/NIS+LDAPmapping.template) covers all standardNIS+ objects, except client_info.org_dir and timezone.org_dir. See252 System Administration Guide: Naming and Directory Services (DNS, NIS, and LDAP) • January 2005