Chapter 4. Setting up Red Hat Directory Server on HP-UX 11i
46
NOTE
The Directory Server requires the fully-qualified domain name to set up the servers,
as described in
Section 1.2.1, “Resolving the Fully-qualified Domain Name”
. The
setup script uses the system's
gethostname()
function to obtain the hostname
(such as
ldap
) and the
/etc/resolv.conf
file to identify the domain name (such
as
example.com
).
Therefore, if there are aliases in the
/etc/hosts
file that do not match the specified
domains in the
/etc/resolv.conf
settings, the setup script cannot correctly
generate the fully-qualified domain name as it is used by DNS, and the default options
in the prompts are wrong.
The hostname is very important. It is used generate the Directory Server instance name, the
admin domain, and the base suffix, among others. If you are using SSL/TLS or Kerberos, the
computer name must be the exact name that clients use to connect to the system. If you will use
DNS, make sure the name resolves to a valid IP address and that IP address resolves back to this
name.
6. Set the user and group as which the Directory Server process will run. The default is
daemon:daemon
. For example:
System User [daemon]:
System Group [daemon]:
7. The next step allows you to register your Directory Server with an existing Directory Server
instance, called the
Configuration Directory Server
. This registers the new instance so it can be
managed by the Console. If this is the first Directory Server instance set up on your network,
it is not possible to register it with another directory. Select
n
to set up this Directory Server
as a Configuration Directory Server and move to the next custom install step, setting up the
administrator user.
NOTE
To register the Directory Server instance with an existing Configuration Directory
Server, select
yes
. This continues with the registration process rather than the regular
custom setup process.
Registering a new instance with a Configuration Directory Server requires you to
supply information about the Configuration Directory Server:
• The Configuration Directory Server URL, such as
ldap://
ldap.example.com:389/o=NetscapeRoot
To use TLS/SSL, set the protocol as
ldaps://
instead of
ldap://
For LDAPS,
use the secure port (636) instead of the standard port (389), and provide a CA
certificate.
• The Configuration Directory Server administrator's user ID; by default, this is
admin
.