sectoldif.cfg Configuration File

Purpose

Defines the names to use for defined data types when generating directory information tree (DIT) data for LDAP.

Description

The sectoldif.cfg configuration file is used by the mksecldap, sectoldif, nistoldif, and rbactoldif commands when generating output to export to LDAP. This file allows a system administrator to customize the naming used for various data branches that will be created in LDAP. Default names are provided and may be used unless customization is desired. Each entry in the file consist of the following fields:
Data_Type LDAP_Attribute_Name LDAP_Object_Class LDAP_Value
Item Description
Data_Type Specifies the data type. Values are USER, GROUP, ID, HOST, SERVICE, PROTOCOL, NETWORK, NETGROUP, RPC, AUTHORIZATION, ROLE, PRIVCMD, PRIVDEV and PRIVFILE.
LDAP_Attribute_Name Specifies the LDAP attribute name.
LDAP_Object_Class Specifies the LDAP object class associated with LDAP_Attribute_Name.
LDAP_Value Specifies the LDAP attribute value.

The Data_Type field must be one of the recognized types. The remaining fields in an entry are configurable by the system administrator. System administrator must ensure that the LDAP_Object_Class field is appropriate for the supplied LDAP_Attribute_Name as the commands do not verify the combination.

Examples

  1. The following modifications to sectoldif.cfg will cause users to be exported to ou=Employees,o=ibm and groups to ou=Departments,o=ibm when -d o=ibm is specified for the sectoldif command:
    USER        ou        organizationalUnit        Employees
    GROUP       ou        organizationalUnit        Departments
  2. The following modifications to sectoldif.cfg will cause an AIX® 4.3 and AIX 5.1 compliant DIT and data to be created when sectoldif -d cn=aixsecdb,cn=aixdata -S aix is invoked:
    USER        ou        organizationalUnit        aixuser
    GROUP       ou        organizationalUnit        aixgroup
    ID          ou        organizationalUnit        system