24.7 Creating the HiRDB LDAP Option environment definition file

You create the HiRDB LDAP Option environment definition file in the path $PDDIR/hirdb_ldap_sods/conf/pdsodsenv.txt. The operands specified in the HiRDB LDAP Option environment definition file are explained below.

Organization of this section
(1) Operands
(2) Example definition
(3) Notes

(1) Operands

1) LDAPHOST Host name of the Sun Java System Directory Server
~<identifier> <<localhost>>
Specifies the host name of Sun Java System Directory Server. You must specify this operand.
2) LDAPPORT Port number of the Sun Java System Directory Server
~<unsigned-integer> ((1-65535)) <<389>>
Specifies the TCP/IP port number that the Sun Java System Directory Server uses during LDAP communication. You must specify this operand.
3) BINDDN Bind DN for searching roles
~<identifier> <<anonymous>>
Specifies the DN in the management registry used for communicating with a remote server.
4) BINDPASSWORD Password for searching roles
~<identifier> <<anonymous>>
Specifies the password used when searching roles.
5) ROLEBASEDN Base DN for searching roles
~<identifier>
Specifies the base DN to be used for searching roles. You must specify this operand.
6) ROLESCOPE {base|one|sub}
Specifies the scope for searching roles. You must specify this operand.
base: Search only the layer of the search starting point.
one: Search the layer that is directly under the search starting point.
sub: Search the layer of the search starting point and all layers under it.
7) UIDKEY Attribute to use as the key for searching users
~<user-ID> <<uid>>
Specifies the attribute to be used as the key for searching users. You must specify this operand.
8) USERBASEDN Base DN for searching users
~<identifier>
Specifies base DN to be used for searching users. You must specify this operand.
9) USERSCOPE {base|one|sub}
Specifies the scope for searching users. Be sure to specify this operand.
base: Search only the layer of the search starting point.
one: Search the layer that is directly under the search starting point.
sub: Search the layer of the search starting point and all layers under it.
10) NETWORKTIMELIMIT Monitoring time for communication timeout
~<unsigned-integer>((0, 1-65535)) <<120>> (seconds)
Specifies in seconds the communication timeout value for the Sun Java System Directory Server. Specifying 0 in this operand disables timeout monitoring. Specify the value for this operand as follows:
NETWORKTIMELIMIT-value < pd_watch_time-value < PDCWAITTIME-value
  • NETWORKTIMELIMIT: Time limit for Sun Java System Directory Server communication.
  • pd_watch_time: Maximum execution time for SQL (specified in the HiRDB system definition).
  • PDCWAITTIME: Maximum wait time for the HiRDB client (specified in the client environment definition).
11) FILTERPREFIX Search filter prefix
~<identifier> <<(&(objectclass=inetOrgPerson))>>
Specifies a prefix for the search filter. The specified character string is prefixed to the search filter used when the Sun Java System Directory Server searches the DNs of user entries.
12) SERCHSUFFIX Search filter suffix
~<identifier> << ) >>
Specifies a suffix for the search filter. The specified character string is suffixed to the search filter used when the Sun Java System Directory Server searches the DNs of user entries.
13) SERCHTIMELIMIT Time limit for searching DNs of user entries
~<unsigned-integer> ((1-999)) <<60>> (seconds)
Specifies in seconds a maximum amount of time for the Sun Java System Directory Server to search the DNs of user entries.
14) RUNTIMEPATH Storage directory name for Sun ONE Directory Runtime
~<path-name> <<$PDDIR/hirdb_ldap_sods/sodruntime>>
Specifies as an absolute path name the storage directory for Sun ONE Directory Runtime. Use the Sun ONE Directory Runtime that is in the path specified by this operand. If no path name is specified, then the path name of Sun ONE Directory Runtime included with HiRDB LDAP Option is assumed.
If you specify a space for the path, an error may result (because such a file does not exist).

(2) Example definition

The following is an example definition of a HiRDB LDAP Option environment definition file:

LDAPHOST                    host1
LDAPPORT                    389
BINDDN              cn=USERA,ou=soft,o=hitachi
BINDPASSWORD        password
ROLEBASEDN          ou=soft,o=hitachi
ROLESCOPE           sub
UIDKEY              uid
USERBASEDN          ou=soft,o=hitachi
USERSCOPE           sub
NETWORKTIMELIMIT            120
FILTERPREFIX        (&(objectclass=inetOrgPerson)
SERCHSUFFIX         )
SERCHTIMELIMIT      60
RUNTIMEPATH

(3) Notes