Setting Up a Test Server Configuration

After installation and startup, LDAP Services for NDS is ready to process client requests for NDS information. However, your NDS tree might not be set up to support LDAP requests. For example, your LDAP clients cannot access phone numbers if the phone numbers are not in NDS. Also, LDAP clients cannot read the phone numbers if they do not have the appropriate NDS rights.

The following configuration procedure creates a test organization within the NDS tree and gives LDAP clients unlimited Read access to this organization. Use this procedure to help you learn how to use LDAP Services for NDS. As you become more familiar with the product, you can reconfigure your server to present the directory data you want to publish to selected clients.


Configure LDAP Services for NDS for Testing Client Communications

  1. Install LDAP Services for NDS.

  2. At the administration workstation, log in to the directory and start NetWare Administrator (nwadmn32.exe).

  3. If you have a container that you can make public, select that container. Otherwise, create a test container somewhere in the tree.

  4. Create several users in the test container and assign values to the following properties:

    • Last name
      •
    • Given name
      •
    • Middle initial
      •
    • Title
      •
    • Location
      •
    • E-mail address
      •
    • Telephone
      •

  5. In the test container, create a user named LDAP_Proxy.

    This user will be given permission to read all the data in the test container.

  6. Select the Password Restrictions page for the LDAP proxy user and clear the check box for Allow User to Change Password. Do not assign a password to this user.

  7. Make the LDAP proxy user a trustee of the test container with the NDS Browse object right and Read and Compare rights to all properties.

    NOTE:   If you allow NDS user binds, these users will typically not have sufficient rights to read and compare most attributes, even though all attributes and classes in the container that are mapped are readable by LDAP.

    8.

  8. Open the LDAP Group object and configure the following:

    1. Click the browse button for the Proxy Username text box, and select the LDAP proxy user you created. This maps all anonymous LDAP requests to the proxy username for NDS authentication.

    2. Click the browse button for the Suffix text box, and select the test container. This limits access by the LDAP proxy user to the test container. Note the complete name of this container. LDAP clients need this name to configure their connections.

    3. Select the Server List page and verify that your LDAP Services for NDS server appears in the list. If it isn't there, click Add and use the browse button to locate the LDAP Server object.

  9. Click OK. LDAP Services for NDS will automatically load in the new configuration.

    10.

  10. To prepare for client configuration, record the following information:

    • Server IP address or DNS name:

    • Test container distinguished name:

      NOTE:   The LDAP distinguished name has no preceding period and uses commas to separate the components. For example, the NDS distinguished name ou=test.c=usa must be entered at an LDAP client as follows: ou=test, c=usa.

    11.


Previous | Next