LDAPWiki: EDirectory Installation

Overview#

There are two primary steps for EDirectory Installation.

We put this information out to help people. However, we do not keep this as current as the Novell Documentation

so ALWAYS consult the Novell Documentation

before using any of the information we provide.

EDirectory Binary Installation#

Whether you are installing a new TREE or adding a new SERVER to an existing TREE, use the following command for installing the binaries for eDirectory:

./nds-install -c server -c admutils

This will install the binaries for the eDirectory Server (-c server) and the administration utilities, enter (-c admutils).

nds-install Parameters#

Some shortcut parameters are also available.

Parameter	Description
-S server name	Specifies the server name. This should normally be the same value returned from "hostname" command.
-t treename	The tree name to which the server has to be added. It can have a maximum of 32 characters. The default treename is $LOGNAME-$HOSTNAME-NDStree.
-n server context	Specifies the context of the server in which the server object is added. It can have a maximum of 64 characters.
-L ldap_port	Specifies the TCP port number on the LDAP server. If the default port 389 is already in use, it prompts for a new port.
-l ssl_port	Specifies the SSL port number on the LDAP server. If the default port 636 is already in use, it prompts for a new port.
-a admin FDN	Specifies the fully distinguished name in DOT.FDN format of the User object with Supervisor rights to the context in which the server object and Directory services are to be created. It can have a maximum of 64 characters.
-o	Specifies the HTTP clear port number for the DHOST process.
-O	Specifies the HTTP secure port number for the DHOST process.
-c	This option avoids prompts during ndsconfig operation, such as yes/no to continue the operation, or prompt to re-enter port numbers when there is a conflict, etc. The user receives prompts only for entering mandatory parameters if they are not passed on command line.
-w <admin password>	This option allows passing the admin user password in clear text so you would not be prompted.

Example to Add Server to An Existing tree #

ndsconfig add -t WILLEKETREE -p 192.168.0.2 -n dc=svr.dc=willeke.dc=com -S bratton  -a cn=admin.ou=admins.dc=willeke.dc=com -e -L 389 -l 636 -o 8389 -O 8636

The Admin name and context and the server context parameters are enclosed in double quotes, and only the '.' in novell.com is escaped using the '
' (backslash) character. You can also use this format when installing a server into an existing tree.

EDirectory Configuration #

Almost all EDirectory Configuration is done using the ndsconfig utility

Creating a new TREE #

Then use NDSCONFIG to put the admin in a preferred place, Use following command to create IDV tree:

./ndsconfig new -i -S serverName -t idv -n ou=servers.o=system -e -a cn=admin.ou=sa.o=system -o 8389 -O 8636

If using an LDAP Authentication tree:

./ndsconfig new -i -S serverName -t TREENAME -n dc=srv.dc=company.dc=com -e -a cn=admin.ou=administration.dc=company.dc=com -o 8389 -O 8636

This puts the admin in ou=administration.dc=company.dc=com and the server in dc=srv.dc=company.dc=com Also assigns the ports for iMonitor to be nonSSL=8389 SSL=8636 (we recommend this as the ports may vary and it is difficult to remember)

The parameters are:

serverName - Should be the same name returned by 'hostname'.

NOTE: These utilities do NOT use LDAP syntax for the FDN. Novell uses a DOT notation for FDN with these utilities.

Administration Utilities#

The Novell Import Conversion Export and LDAP Tools administration utilities are installed. These "Administration Utilities" do not include iManager which is a separate installation and you will probably want to install somewhere in your environment.

More Information#

There might be more information for this subject on one of the following: