13.07.2015 Views

Naming and Directory Services (DNS, NIS, and LDAP)

Naming and Directory Services (DNS, NIS, and LDAP)

Naming and Directory Services (DNS, NIS, and LDAP)

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

nisplus<strong>LDAP</strong>databaseIdMappingIf this name resides under the domain name specified by thenisplus<strong>LDAP</strong>baseDomain attribute, you can omit the portion that equals thenisplus<strong>LDAP</strong>baseDomain value.For example, if nisplus<strong>LDAP</strong>baseDomain has the value some.domain., <strong>and</strong> theobject to be mapped is a table called nodeinfo.some.domain., the object namecan be shortened to nodeinfo.2. Invent a database id to identify the object.The database id must be unique for the mapping configuration used, but is nototherwise interpreted. It does not show up in the <strong>LDAP</strong> data. In order to reduceconfusion with entry object mappings, create a database id identifying the tableobject proper (not the table entries) using an explanatory string like _table at theend.For this example, use the database id nodeinfo_table, <strong>and</strong> establish theconnection between the database id <strong>and</strong> the object in the st<strong>and</strong>ard mapping filelocation (/var/nis/<strong>NIS</strong>+<strong>LDAP</strong>mapping) by adding the following.nodeinfo_table:nodeinfo.some.domain.Assuming that nisplus<strong>LDAP</strong>baseDomain is some.domain., the followingwould also work.nisplus<strong>LDAP</strong>databaseIdMappingnodeinfo_table:nodeinfo3. Decide on a TTL for the object.This is the time during which the rpc.nisd daemon regards its local copy of theobject as valid. When the TTL expires, the next reference to the object will initiatean <strong>LDAP</strong> lookup to refresh the object.There are two different TTL values. The first is set when the rpc.nisd daemonfirst loads the object from disk (after a reboot or restart), <strong>and</strong> the second pertains toall refreshes from <strong>LDAP</strong>. The first TTL is selected r<strong>and</strong>omly from a configuredrange. For example, if nodeinfo_table should be valid for a period of betweenone <strong>and</strong> three hours following initial load, <strong>and</strong> for twelve hours thereafter, specifythe following.nisplus<strong>LDAP</strong>entryTtlnodeinfo_table:3600:10800:432004. Decide where the object data should be stored in <strong>LDAP</strong>.The template mapping file suggests putting non-entry object data in theou=nisPlus container.If you use this scheme, <strong>and</strong> have not yet created the appropriate attribute, objectclass, <strong>and</strong> container, see “Mapping <strong>NIS</strong>+ Objects Other Than Table Entries”on page 273.For example, assume you want to store the nodeinfo object in theou=nisPlus,dc=some,dc=domain container, <strong>and</strong> that the <strong>LDAP</strong> entry shouldhave the cn nodeinfo. Create the following nisplus<strong>LDAP</strong>objectDN.nisplus<strong>LDAP</strong>objectDN nodeinfo_table:\cn=nodeinfo,ou=nisPlus,dc=some,dc=domain?base?\objectClass=nisplusObjectContainer:\Chapter 16 • Transitioning From <strong>NIS</strong>+ to <strong>LDAP</strong> 283

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!