Enabling LDAP directory services

To use a directory service, you must:

  1. Configure the LDAP server according to the vendor-supplied documentation.

  2. Add the location of the LDAP libraries to the PATH environment variable for your platform.

  3. Configure the libtcl*.cfg file to use directory services.

    Use any standard ASCII text editor to:

    WARNING! The LDAP URL must be on a single line.

    ldap=libdldap.so ldap://host:port/ditbase??scope??
         bindname=username password
    

    For example:

    [DIRECTORY] 
    
    ldap=libdldap.so ldap://huey:11389/dc=sybase,dc=com??
         one??bindname=cn=Manager,dc=sybase,dc=com secret
    

    one” indicates the scope of a search that retrieves entries one level below the DIT base.

    Table 5-3 defines the keywords for the ldapurl variables.

    Table 5-3: ldapurl variables

    Keyword

    Description

    Default

    host (required)

    The host name or IP address of the machine running the LDAP server

    None

    port

    The port number that the LDAP server is listening on

    389

    ditbase (required)

    The default DIT base

    None

    username

    Distinguished name (DN) of the user to authenticate

    NULL (anonymous authentication)

    password

    Password of the user to be authenticated

    NULL (anonymous authentication)

  4. Verify that the appropriate environment variable points to the required third-party libraries. The Netscape LDAP SDK libraries are located in %SYBASE%\%SYBASE_OCS\lib3p.The Windows PATH environment variable must point to this directory.

  5. Add your server entry to the LDAP server using dscp or dsedit. See “Adding a server to the directory services”.