PMDF System Manager's Guide

This section lists options affecting LDAP and URL lookups.

LDAP_HOST (host name)

Specify the default host to which to connect when making LDAP queries.

LDAP_PASSWORD (string)

The password to use when binding for LDAP queries.

LDAP_PORT (integer)

Specify the port to which to connect when making LDAP queries. The default value is 389, the standard LDAP port number.

LDAP_TIMEOUT (integer)

Control how long to wait (in hundredths of seconds) before timing out on an LDAP query. The default value is 200.

LDAP_TLS_MODE (1 or 2)

Control whether TLS is used for LDAP queries. The default if the option is not specified is to not use TLS. A value of 1 tells PMDF to try to use TLS to look up the alias in LDAP, but continue without it if TLS is not available. A value of 2 tells PMDF to require TLS. Note that in order to use TLS, your LDAP server must be configured to do TLS on its end. You may need to have the Certificate Authority (CA) certificate to be used by LDAP on your PMDF system. If so, the CA certificate should be placed in the file pmdf_table:ldap-cacert.pem.

LDAP_USERNAME (distinguished-name)

The DN under which to bind for LDAP queries.

MAX_URLS (integer)

Maximum number of URLs that can be active when reiteratively performing URL lookups; that is, this is the maximum degree of nesting of URL references. The default value is 5.

REVERSE_URL (URL)

URL to query for address reversal. Standard LDAP URL syntax is used, except omitting the LDAP server and port which are instead specified via the LDAP_HOST and LDAP_PORT options. Also, certain substitution sequences are available, as shown in Table 3-1.