Sun Oracle Crypto Accelerator 6000 Board, User Manual, Page: 122 / 266

100 Sun Crypto Accelerator 6000 Board User’s Guide for Version 1.1 • February 2013
Note – The
scakscfg
properties are the same for both Linux and Oracle Solaris.
TABLE 4-1
scakscfg
Utility Command-Line Options
Option Description
scakscfg config
Makes the necessary configuration additions, enables RDN
modification, and creates the base objects for centralized
keystore support. The required second parameter
cfg-file refers to
a configuration template file that
scakscfg
uses to configure
the directory server. There are two configuration files delivered
with the board:
•
opends-cfg
– Configures an OpenDS directory
•
sunds-cfg
– Configures DS 5.2 or DSEE 6.x directory servers
These files are located in
/var/sca/cfg
(Oracle Solaris), and in
/var/opt/sun/sca6000/cfg
(Linux).
scakscfg makeagent
Creates an agent entry in the directory server. The administrator
has the option to give the agent password-based (
simple
) or
certificate-based (
clientauth
) authentication credentials, or
both.
-b
cks-dn Base object under which the CKS infrastructure is created. This
device does not need to be a root node in a directory server. The
device can exist anywhere under the root DN. This option is
required.
-D
bind-dn The DN that the administrator uses to authenticate to the
directory server to make the configuration changes. The default
for this option is
CN=Directory Manager
.
-h
hostname | IP-addr Connects to the directory server on hostname | IP-addr . The
default for this option is
localhost
.
-H
Displays online help and command usage.
-p
port-number Connects to the directory server on the specified port. This
defaults to 389 if SSL is not enabled or to 636 if SSL is enabled.
-S
dbpath Specifies that LDAP operations must be performed over SSL.
The dbpath parameter is the path to the NSS certificate database
used by scakscfg to set up an SSL tunnel for making the
configuration changes to the directory server. On Linux, dbpath
can be either a directory containing the Root CA certificates used
to validate the SSL certificate provided by the directory server, or
a specific file containing one or more CA certificates.