Configuring VNX Naming Services

EMCCorporationCorporateHeadquarters:Hopkinton,MA01748-91031-508-435-1000®VNX™SeriesRelease7.1ConfiguringVNX™NamingServicesP/N300-013-813REV01ConfiguringVNX™NamingServices2of80Release7.13of80Release7.1ConfiguringVNX™NamingServicesContentsIntroduction..................................................5Systemrequirements.......................................5Restrictions...............................................6Userinterfacechoices......................................6Terminology..............................................7Relatedinformation........................................9Concepts....................................................10Localfiles...............................................10NIS.....................................................11DNS....................................................11LDAP-baseddirectoryservices..............................12ActiveDirectory..........................................18WINS....................................................18nsswitch.conffile.........................................19Protocoluserauthentication................................19Configuringlocalfiles.........................................20Prerequisites.............................................20ConfigurelocalfilesonaDataMover........................22ConfiguringNIS..............................................23Prerequisites.............................................23ConfigureaDataMoverasanNISclient......................23ConfiguringDNS.............................................24Prerequisites.............................................24ConfigureaDataMoverasaDNSclient......................24ConfiguringaDataMoverasanLDAP-baseddirectoryserviceclient.25Prerequisites.............................................25ConfigureanLDAP-baseddirectoryclientbyusingadomainname..................................26ConfigureanLDAP-baseddirectoryclientbyusingabasedistinguishedname.........................27ConfiguringadditionalLDAP-baseddirectoryoptions..............28Specifytheuseofsimple(password)authentication............28SpecifytheuseofKerberosauthentication....................29EnableSSLforLDAP-baseddirectories.......................31SpecifytheSSLpersona...................................32SpecifytheSSLciphersuite................................33SpecifyaniPlanetclientconfigurationprofile..................34Copytheldap.conffile.....................................35SpecifyanNISdomain.....................................37Configuringthensswitch.conffile...............................38Prerequisites.............................................38Editthensswitch.conffile..................................38Managinglocalfiles...........................................40ManagingNIS................................................41DisplaytheNISconfiguration..............................41VerifythestatusoftheNISconfiguration....................42DeletetheNISconfiguration...............................42ManagingDNS...............................................43VerifytheDNSconfiguration...............................43ConfiguringVNX™NamingServicesRelease7.14of80ConfiguringVNX™NamingServicesRelease7.14of80DeletetheDNSconfiguration...............................43SetorchangetheDNSserverprotocol.......................44CleartheDNScache.......................................44DisableaccesstotheDNSserver...........................45EnableaccesstotheDNSserver............................45ManaginganLDAP-baseddirectory.............................46VerifythestatusoftheLDAP-baseddirectoryservice.........46DeletetheLDAP-baseddirectoryconfiguration................47DisplayinformationabouttheLDAP-baseddirectoryconfiguration....................................47TemporarilydisabletheLDAP-baseddirectoryservice.........48EnabletheLDAP-baseddirectoryservice.....................49DisableSSLforLDAP-baseddirectories.....................50LookingupinformationintheLDAP-baseddirectoryserver......51Troubleshooting..............................................55Wheretogethelp.........................................55E-LabInteroperabilityNavigator.............................55Checknetworkconnectivitybyusingserver_ping..............55AccessnamingservicesfromtheControlStation..............55CheckcommunicationwithDNS.............................56CheckLDAP-baseddirectoryoperation.......................57VerifythedownloadoftheiPlanetclientprofile................58EditOpenLDAPschemaforLinux...........................59Usinggroupmembershipwithdistinguishednamesyntax.......59CIFSusermappinginamultiprotocolenvironment.............60Errormessages...........................................61LDAPerrormessages.....................................61TrainingandProfessionalServices..........................63AppendixA:iPlanetclientprofileattributes.......................64AppendixB:OpenLDAPconfigurationfile........................67AppendixC:IdMUconfigurationfiletemplate.....................68AppendixD:SFU3.5co