LDAP

[Nobody's Hero]

I am in an LDAP environment. We control our UNIX servers with openLDAP.

If I want to remove one of my hostnames from my LDAP environment, what is the best way to do it? Can I do it from the command line?

Sorry but I have like zero LDAP experience except creating a new user with an ldif file.

Would I have to create local accounts on the server I want to remove before I remove it?

[Aashique · Accepted solution]

Hi,
you can just move the ldap client configuration file.
/etc/opt/ldapux/ldapclientd.conf

your that server authentication done by ldap server. So modify your pam.conf file and nsswitch.conf file.

After that delete the client from the ldap server.

Thanks & Regards

Aashique

[YAQUB_1]

Hi Hero,

For LDAP-based accounts that are not yet known to the system, you can configure an initial setting for the auditing flag. You can configure this flag such that when an account becomes known to the system for the first time, auditing for that account is immediately enabled or disabled. This flag is
defined as the initial_ts_auditing parameter in the /etc/opt/ldapux/ldapux_client.conf file.

To create a new profile, run
/opt/ldapux/config/setup. When setup asks you for the distinguished name(DN) of the profile, give a DN that does not exist and setup will prompt you for the parameters to build a new profile. The setup program also configures the local client to use the new profile.

Alternatively, you could use your directory administration tools to make a copy of an existing profile and modify it.

You can also use the interactive tool create_profile_entry to create a new profile as follows:
cd /opt/ldapux/config
./create_profile_entry

Thanks--Yaqub
HP Support!!!