Alternate ldap

Manage Certificates for Alternate LDAP over SSL Servers (Oracle ILOM CLI) Alternate LDAP over SSL servers can also have SSL certificates that need to be loaded onto or removed from those servers. Use this task to manage the certificates for the alternate servers. Do one of the following: Remove an existing certificate. For example, to remove the certificate file from alternate server 1, type: -> set /SP/clients/ldapssl/alternateservers/1/cert/ clear_action=trueAre you sure you want to remove the cert (y/n)? y-> Load a certificate file onto an alternate AD server. For example, to load a certificate file onto alternate server 1, type: -> load /SP/clients/ldapssl/cert/ load_uri=URI-> where URI is the uniform resource indicator for the certificate file. For example, to load the certificate file 112115.cert onto alternate server 1, type: -> load /SP/clients/ldapssl/alternateservers/1/cert/ load_uri=ftp://root:[email protected]/privkeystore/112115.certLoad Successful.-> Enable the LDAP over SSL Client (Oracle ILOM CLI) Configure LDAP over SSL Client Properties (Oracle ILOM CLI) Manage an LDAP over SSL Server's Certificate (Oracle ILOM CLI) Configure Alternate LDAP over SSL Servers (Oracle ILOM CLI) LDAP over SSL Groups (Oracle ILOM CLI) Configure an LDAP over SSL Administrator Group (Oracle ILOM CLI) Configure an LDAP over SSL Operator Group (Oracle ILOM CLI) Configure an LDAP over SSL Custom Group (Oracle ILOM CLI) Configure an LDAP over SSL User Domain (Oracle ILOM CLI) Configure an LDAP over SSL Optional User Mapping (Oracle ILOM CLI) Disable the LDAP over SSL Client (Oracle ILOM CLI) Display the Oracle ILOM LDAP over SSL Client Information (Oracle ILOM CLI) Display LDAP

This procedure, seethe table that follows the procedure.Log in to a host that has an SNMP tool and the ILOMMIBs installed. For example, type:ssh username@snmp_manager_ipaddressPassword: passwordRefer to the following SNMP command examples:To view the IP address of LDAP/SSL alternate server ID number 3, type:% snmpget -v1 -cprivate -mALL SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerIp.3SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = IpAddress: 10.7.143.236To set the IP address of LDAP/SSL alternate server ID number 3 to10.7.143.246, type:% snmpset -v1 -cprivate -mALL SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerIp.3 a 10.7.143.246SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = IpAddress: 10.7.143.246% snmpget -v1 -cprivate -mALL SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerIp.3SUN-ILOM-CONTROL-MIB::ilomCtrlLdapSslAlternateServerIp.3 = IpAddress: 10.7.143.246To view and clear the certificate information associated with the alternate server whenit is set to true, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertClear.0% snmpset -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertClear.0 i 0To view the alternate server certificate version of the certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertVersion.0To view the serial number of the alternate server certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertSerialNo.0To view the issuer of the alternate server certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertIssuer.0To view the subject of the alternate server certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertSubject.0To view the valid start date of the alternate server certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertValidBegin.0To view the valid end date of the alternate server certificate file, type:% snmpget -mALL -v2c -cprivate SNMP_agent_ipaddress ilomCtrlLdapSslAlternateServerCertValidEnd.0The following table describes the LDAP/SSL Alternate Server SNMP MIB objects.MIB ObjectDescriptionAllowed ValuesTypeDefaultilomCtrlLdapSslAlternateServerIdAninteger identifier of the LDAP/SSL alternate server table.1 to 5 Note - This object isnot accessible for reading or writing.IntegerNoneilomCtrlLdapSslAlternateServerIPThe IP address of the LDAP/SSL alternate serverused as directory server for user accounts.ipaddressStringNoneilomCtrlLdapSslAlternateServerPortSpecifies the port number for theLDAP/SSL alternate server. Specifying 0 as the port indicates that auto-select will use thewell-known port number. Specifying 1-65535 explicitly sets the port number.portnumber (range: 0 to 65535)IntegerNoneilomCtrlLdapSslAlternateServerCertStatusAstring indicating the status of the certificate file. This is useful in determiningwhether a certificate file is present or not.status (maximum size: 255 characters)StringNoneilomCtrlLdapSslAlternateServerCertURIThis is theURI of a certificate file needed when Strict Certificate Mode is enabled. Settingthe URI causes the transfer of the file, making the certificate available immediately forcertificate authentication. Additionally, either remove or restore are supported for direct certificate manipulation.URIStringNone Copyright © 2008, 2014, Oracle and/or its affiliates. All rights reserved. Legal Notices

The Lightweight Directory Access Protocol (LDAP) is used to access the Corporate Address Book to locate e-mail addresses and other information for use with many of the machine services. LDAP can be configured using CentreWare Internet Services.Before configuring LDAP:Make sure your network supports LDAP services.Obtain the IP address or host name of the LDAP Server. NOTE: The machine may also need a login name and password if the LDAP server is not configured to allow NULL names and passwords.Use an LDAP client to validate the settings before inputting them into the CentreWare Internet Services menus. LDAP clients include Microsoft Outlook Express, Microsoft Outlook, Lotus Notes, and other e-mail clients.To use host names, DNS must be configured on the machine.To configure LDAP:From a computer, open an Internet browser window.Enter the IP address of the Phaser 3635MFP in the Address field, and then press [Enter] on the keyboard. The CentreWare Internet Services window will be displayed.Click on the [Properties] tab.Click on [Connectivity] to expand the list of options.Click on [Protocols] to expand the list.Click on [LDAP Directory]. The LDAP Directory page will be displayed.Under the Server Information section, click on the [IP Address] or [Host Name] radio button.Enter the IP address or host name of the LDAP server.NOTE: If Host Name is selected, the DNS name must be configured within the TCP/IP screen.Enter the LDAP port. The default is 389.Enter the information for an alternate LDAP server, if required, in the Backup IP Address / Host Name and Port field.Click on the