11.3 Setting Runtime Credentials

The Runtime Admin name and Runtime Admin password are stored in the OES Credential Store, which is later used by the DNS Server for eDirectory authentication. The Runtime Admin credentials are stored with root (install user) and named user permissions. There can only be one Runtime User credential for DNS stored in OES Credential Store.

NOTE:In cluster setup, Runtime Credentials must be set on all the nodes in the DNS cluster.

To set the runtime credentials, execute the following command:

oescredstore -s -n dns-ldap -u <username> -p <password>

For example, to set the credentials of the runtime admin dnsadmin, execute the following command:

oescredstore -s -n dns-ldap -u cn=dnsadmin,o=novell -p Password

If you want to run novell-named as any non-root user other than named, you need to set the credentials of Runtime Admin for that non-root user because OES Credential Store allows you to read the credentials only as the user who stored it (the non-root user must be an eDirectory user and a member of the dhcp Group object) by executing the following commands:

su <non-root user>

oescredstore -s -n dns-ldap -u <username> -p <password>

This sets the user name and password in OES Credential Store for DNS Server.

Copy the /etc/opt/novell/named/.named.cred to same directory under the chroot -t dir and change the user and group ownership from named:named to the -u user and its group.